Connex Credit Union Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Connex Credit Union data breach that has affected 172,000 individuals.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Connex Credit Union
Connex Credit Union is based in North Haven, Connecticut. Founded in 1940, Connex has grown to become one of the largest credit unions in the state, managing over $1 billion in assets and serving more than 70,000 members across eight branches. Membership is open to individuals who live, work, attend school, or worship in New Haven, Hartford, Middlesex or Fairfield counties.
What Happened?
On June 3, 2025, Connex Credit Union detected unusual activity in its cyber environment. An investigation revealed that unauthorized access to certain files occurred between June 2 and June 3, 2025. By July 27, 2025, Connex determined that some members’ personal information may have been involved in the incident.
Information Exposed:
- Names of individuals
- Social Security number information
- Government-issued ID numbers (such as passport, Social Security number, account number, credit or debit card number, state ID card)
- Financial information (such as account numbers)
Connex notified affected individuals by U.S. mail and reported the breach to state authorities, including the California and Texas attorneys general.
Approximately 172,000 Americans have been affected, including 965 Texas residents.
The breach was disclosed to the California Attorney General’s office on Aug. 7, 2025, and to the Maine and Texas Attorney Generals' offices on Aug. 8, 2025.
Your Rights and Next Steps
If you received a notification from Connex Credit Union about this incident, there are important steps you can take to help protect yourself:
- Enroll in the complimentary credit monitoring and identity protection services offered by Connex through Cyberscout. You must enroll within 90 days of receiving the notice.
- Review your account statements and credit reports closely for any suspicious activity.
- Consider placing a fraud alert or security freeze on your credit file. A fraud alert is free and lasts at least one year, while a security freeze can prevent new credit from being opened in your name without your consent.
- Report any fraudulent activity or suspected identity theft to law enforcement, your state attorney general, and/or the Federal Trade Commission (FTC).
Remember, even if the notice states that there is no evidence of unauthorized access to your accounts or funds, the exposure of sensitive information like Social Security numbers and account numbers can still put you at risk for identity theft and fraud.
You May Be Entitled to Compensation
If your information was exposed in the Connex Credit Union data breach, you may have legal rights and could be entitled to compensation. Lawyers are ready to help individuals affected by this incident understand their options and pursue claims for damages, credit monitoring costs, or other losses.
To find out if you qualify to join a class action lawsuit or to get more information, complete the below form. This is the first step to protecting your rights and seeking compensation for any harm caused by the breach.