Travis County CU Data Breach Exposes Social Security Numbers

Travis County Credit Union, a small, not-for-profit credit union based in Austin, Texas, disclosed a data breach that may have exposed the personal information of individuals.

On March 3, 2026, Travis County Credit Union identified suspicious activity within its email environment after detecting unauthorized emails. Upon discovering the issue, the credit union launched an investigation and took steps to identify, contain and remediate any unauthorized activity within its systems.

The credit union changed passwords for the affected email accounts, revoked active session tokens and reset multifactor authentication. The credit union also engaged experienced data security and privacy professionals to assist in conducting a thorough forensic investigation into the incident, which determined that an unauthorized actor had successfully accessed credit union email accounts.

Through the investigation, the credit union identified that emails within the compromised accounts contained personal information belonging to certain individuals. The information was potentially accessed or acquired by the unauthorized actor during the period of unauthorized access.

The types of personal information involved in the breach included names and Social Security numbers.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation. The total number of individuals affected across the United States remains undisclosed.

Travis County Credit Union mailed notification letters to affected individuals on July 29, 2026. The credit union has also posted a notice about the incident on its website.

Travis County Credit Union's response to the breach

The credit union is offering affected individuals 24 months of complimentary credit monitoring and identity theft protection services through Experian IdentityWorks.

To enroll in the complimentary credit monitoring, affected individuals should visit the Experian IdentityWorks enrollment page and enter the unique activation code provided in their notification letter. The enrollment deadline is Oct. 31, 2026.

For questions about the credit monitoring product, assistance with identity restoration related to this incident or an alternative to enrolling online, affected individuals can contact Experian's customer care team at 833-918-1325. The phone line is available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding U.S. holidays.