MANASSAS, Va.–CU Collections, LLC has now confirmed it suffered what it called a “data security incident” that was first reported by CUToday.info in February.
The company said, “information in its possession may have been accessed or made public by unauthorized persons.” CU Collections works with a number of credit unions in collecting on unpaid accounts.
In February 2020, CU Collections said it learned that it had been the victim of a cyber attack, enabling unauthorized parties to access personal information which had been provided to CU Collections in order to collect money owed to its partner credit unions. In the CUToday.info report in February, Brett Callow, threat analyst at security firm Emsisoft, said he had seen stolen on data on a hacker’s website that included sensitive information relating to members CU Collections is reaching out to, including home addresses, Social Security numbers, work and cell phone numbers, member numbers, and other information related to the file in collection.
Assistance Being Offered to Members
CU Collections has since confirmed such data was exposed.
“Immediately upon discovering this, CU Collections worked with industry-leading cybersecurity firms to conduct an investigation,” the company said. “In addition, CU Collections consulted with law enforcement about this criminal activity and will continue to provide whatever cooperation is necessary to hold the malicious actors accountable.”
The company went on to say it has been “working closely with cybersecurity experts to resolve this incident and to improve the security of their systems to prevent a similar incident from occurring in the future.”
The company is offering complimentary identity protection and credit monitoring services for all potentially affected members.