On July 17, 2023, Quorum Federal Credit Union filed a notice of data breach with the Attorney General of Maine after discovering that a vulnerability within the file transfer software MOVEit resulted in an unauthorized party being able to access confidential customer data. In this notice, Quorum explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, financial account information and driver’s license numbers. Upon completing its investigation, Quorum began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Quorum Federal Credit Union, it is essential you understand what is at risk and what you can do about it. Quorum is one of many companies affected by the MOVEit data breach. However, this does not change the fact that your information may now be in the hands of hackers or other criminals looking to steal your identity. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Quorum Credit Union data breach. For more information, please see our recent piece on the topic here.

What Caused the Quorum Credit Union Breach?

The Quorum Credit Union data breach was only recently announced, and more information is expected in the near future. However, Quorum’s filing with the Attorney General of Maine provides some important information on what led up to the breach.

According to this source, Quorum uses a file transfer program called MOVEit, which is created by Progress Software. Back in May 2023, Progress Software announced a previously unknown vulnerability within MOVEit that allowed unauthorized parties to access data stored on MOVEit servers.

Recently, Quorum was notified of the MOVEit vulnerability. In response, Quorum followed the remediation steps released by Progress Software and then launched an investigation to determine what, if any, customer data was leaked.

The Quorum investigation confirmed that an unauthorized actor was able to access its MOVEit server between May 28, 2023 and May 30, 2023, which contained personal information about bank customers.

After learning that sensitive consumer data was accessible to an unauthorized party, Quorum Credit Union reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, financial account information and driver’s license number.

On July 17, 2023, Quorum Credit Union sent out data breach letters to anyone who was affected by the recent data security incident.

More Information About Quorum Federal Credit Union

Founded in 1934, Quorum Federal Credit Union is a financial institution located in Purchase, New York. Originally created as a credit union for Kraft Foods employees, Quorum now serves more than 75,000 members in all 50 states. Quorum membership is available to employees of The Kraft Heinz Company and its subsidiaries, Mastercard, Mondelēz International, The Ogilvy Group, Inc., Hitachi Metals America, Ltd., and dozens of other companies. Quorum Credit Union employs more than 123 people and generates approximately $30 million in annual revenue.