.png)
Energy Capital Credit Union Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Energy Capital Credit Union data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Energy Capital Credit Union
Energy Capital Credit Union is a state-chartered credit union based in Houston, Texas. Founded in 1934 by employees of Humble Oil and Refining Co., the credit union now serves more than 18,000 members throughout Texas.
What Happened?
In late 2024, Energy Capital Credit Union experienced a significant cybersecurity incident. On Nov. 19, 2024, the credit union discovered that an unauthorized actor had gained access to its network. The breach occurred between Oct. 29, 2024, and Nov. 19, 2024.
After an internal investigation and assistance from external cybersecurity professionals, it was determined that sensitive files may have been accessed by the unauthorized party. On Dec. 4, 2025, Energy Capital Credit Union confirmed that the compromised files contained personal information.
Information Exposed:
- Credit/debit card numbers
- Driver’s license numbers
- Financial account information
- Social Security numbers
A ransomware group known as FOG claimed responsibility for the attack and posted about the breach on a dark web network on Dec. 19, 2024. The group asserted that they obtained internal financial documents, customer and employee contacts and insurance documents.
The breach was reported to the Massachusetts Attorney General’s office on Dec. 31, 2025. In Massachusetts, 31 individuals were reported as affected.
Your Rights and Next Steps
If you received a notice from Energy Capital Credit Union or believe your information may have been involved, there are important steps you can take to protect yourself:
- Take advantage of complimentary credit monitoring and identity theft protection services offered by Energy Capital Credit Union. Impacted individuals are eligible for Financial Shield Complete, which includes credit monitoring, transaction monitoring, identity theft insurance and more.
- Place a fraud alert on your credit file. This is free and instructs creditors to take extra steps to verify your identity before opening new accounts.
- Consider placing a security freeze on your credit file at no cost. This prevents new credit accounts from being opened in your name without your permission.
- Obtain your free credit report from each of the three major credit bureaus (Equifax, Experian, TransUnion).
- Remain vigilant by reviewing your financial account statements and credit reports regularly for unauthorized or irregular activity.
- If you notice any suspicious activity, contact your financial institutions, report it to law enforcement and consider filing a complaint with the Federal Trade Commission.
Under state and federal law, you have rights if your information was compromised, including the right to file a police report if you are a victim of identity theft and to seek additional protections.
You May Be Entitled to Compensation
If your information was exposed in the Energy Capital Credit Union data breach, you may be eligible for compensation. Lawyers are ready to help affected individuals understand their rights and pursue claims for damages related to the breach.
To find out if you qualify and to join others seeking compensation, complete the below form to get started.
.svg)