Bellwether Community Credit Union Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Bellwether Community Credit Union data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Bellwether Community Credit Union
Bellwether Community Credit Union is a not-for-profit, member-owned financial institution based in New Hampshire. Founded in 1921, it has served the region for over a century, focusing on providing banking services to individuals who live or work in New Hampshire and parts of Massachusetts.
The credit union offers a full range of banking products, including checking and savings accounts, consumer and business loans, mortgages, and digital banking services. As a member-owned cooperative, Bellwether operates with the goal of supporting its members and reinvesting in the local community rather than maximizing profits.
What Happened?
In August 2025, Bellwether Community Credit Union was impacted by a significant data breach involving its third-party vendor, Marquis Software Solutions Inc., a marketing and communications provider. On Aug. 14, 2025, Marquis detected suspicious activity on its network and determined it had been the victim of a ransomware attack. The breach occurred through unauthorized access to Marquis’ SonicWall firewall.
After launching an investigation and notifying federal law enforcement, Marquis found that an unauthorized third party may have acquired files containing sensitive information from its systems. Starting on Nov. 26, 2025, the cybersecurity incident impacting Bellwether customers was disclosed to the Attorney General's offices in Maine, Washington, and Iowa.
Possible Information Exposed
- Names
- Addresses
- Phone numbers
- Social Security numbers
- Taxpayer Identification Numbers
- Financial account information
- Dates of birth
The breach affected at least 864 individuals in Maine, 41 in Washington, and seven in Iowa, with notifications to affected individuals beginning in late November 2025.
Your Rights and Next Steps
If you received a notice about the Bellwether Community Credit Union data breach or believe your information may have been involved, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Communication and credit monitoring services: Review and save any notification letters you receive. Enroll in free credit monitoring and identity protection services offered by Marquis.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your personal information was exposed in the Bellwether Community Credit Union data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Data breach laws provide protections and remedies for individuals whose sensitive information is compromised due to a company’s failure to safeguard data. To find out if you qualify and to join a lawsuit, complete the form below.
.png)