Chevron Federal Credit Union Failed to Protect Customer Data from Cyberattack, Class Action Says

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit claims Chevron Federal Credit Union failed to protect the personal information of current and former customers from a May 2023 cyberattack.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

In an August 2023 notice letter sent to victims, the credit union announced that it had been affected by a data breach that targeted MOVEit, a widely used file transfer platform the company utilizes to store and share large files. The notice explains that between May 30 and 31, an unauthorized third party gained access to the defendant’s files through a vulnerability in the MOVEit software and, as a result, compromised the private information of its customers.

The 47-page lawsuit relays that the personal data exposed in the cyberattack included individuals’ names, addresses, account numbers, email addresses, phone numbers, online account usernames, dates of birth, Social Security numbers and debit card numbers.

Related Reading: 2023 MOVEit Data Breach Lawsuits

The suit argues that the California-based credit union—which also has locations in Louisiana, Mississippi, Texas and Utah—“negligently” failed to implement reasonable measures to protect consumer data and ensure its business vendor maintained adequate cybersecurity practices.

What’s more, the notice letter sent to impacted individuals was insufficient, as it did not explain how the cybercriminals gained access or what steps are being taken to prevent future disclosures of sensitive data, the case contends.

The plaintiff, a Chevron Federal Credit Union customer residing in California, received notice in August of this year that her private data had been compromised in the breach, the complaint says.

Like other victims, the plaintiff now faces a lifelong risk of fraud, identity theft and other illegal schemes as a result of the credit union’s negligence, the filing claims.

The lawsuit looks to represent anyone in the United States whose personal information was disclosed in the Chevron Federal Credit Union data breach.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.