"500k Impacted by Texas Dow Employees Credit Union Data Breach"

Texas Dow Employees Credit Union (TDECU) started notifying over 500,000 individuals that their personal information was compromised in the MOVEit campaign last year.  Conducted by the Russian-speaking Cl0p ransomware group, the hack came to light on May 31, 2023, when Progress Software warned that hackers had exploited a zero-day in the MOVEit Transfer managed file transfer (MFT) software, tracked as CVE-2023-34362, to access customer data.  According to security researchers at Emisoft, more than 2,700 organizations and roughly 96 million people are estimated to have been affected by the attack.  In a notice, the credit union said it determined on July 30, 2024, that the compromised information includes names, dates of birth, Social Security numbers, bank account numbers, credit card numbers, driver’s license numbers, other ID numbers, and taxpayer identification numbers.

 

SecurityWeek reports: "500k Impacted by Texas Dow Employees Credit Union Data Breach"

Submitted by Adam Ekwall on