A South Carolina credit union says 240,000 customers were exposed in an apparent cyberattack.
SRP Federal Credit Union, one of the largest in the state with assets exceeding $1.6 billion in 2022, filed violation notices with regulators in Maine and Texas on Dec. 13, The Record reports.
A law enforcement investigation found that hackers accessed the bank’s internal systems multiple times between September 5 and November 4, 2024. SRP says the hackers “may have acquired certain files from our network during this time.”
While SRP has not publicly stated what specific information was stolen from them, The Record reports that the credit union has told Texas regulators that Social Security numbers, driver’s license numbers, dates of birth and financial information such as account numbers and credit or debit card numbers are at risk.
According to cybersecurity management and threat analysis firm Hackmanac, a well-known ransomware group called Nitrogen claimed responsibility for the attack, which also claimed to have customers’ full names and credit scores.
“The Nitrogen ransomware group claims to have breached SRP Federal Credit…