Ransomware Group Claims 50GB Stolen In Gale Credit Union Data Breach
By CU Today Staff —
GALESBURG, Ill.—Gale Credit Union has begun notifying individuals of a data breach that exposed names, Social Security numbers, financial account numbers and Visa credit card numbers and expiration dates, with the Akira ransomware group claiming it stole approximately 50 gigabytes of data from the Illinois credit union.
The $74-million Gale CU reported the breach Sept. 3 to the Massachusetts Office of Consumer Affairs and Business Regulation. The state filing shows two Massachusetts residents were affected, but Gale has not disclosed the total number of people affected nationwide. The filing confirms Social Security numbers, financial account information and credit/debit card numbers were compromised.
According to GalaxyWarden, Akira listed Gale CU on its dark-web leak site Aug. 31 and claimed it obtained 50GB of corporate data, including employee passport, Social Security and driver's license information, payment card data, client and partner information, financial records, contracts and agreements. Gale's notification letter said its investigation determined its security systems blocked access to its Member Account Database and that it worked with its card processor to reissue affected payment cards.
Gale CU said it has enhanced its security measures and is offering affected individuals two years of complimentary Kroll identity monitoring, including credit monitoring, fraud consultation and identity-theft restoration. The credit union said it is not aware of any misuse of the exposed information. At least two law firms, Edelson Lechtzin LLP and Mason LLP, have announced investigations into potential litigation stemming from the incident.
Originally reported by CU Today.