Connex Credit Union Data Breach: 172,000 Customers at Risk

Another major data breach has put consumers’ sensitive information in jeopardy. 

Connex Credit Union, a Connecticut-based financial cooperative with more than 70,000 members, has revealed that hackers accessed and stole sensitive files containing names, Social Security numbers, debit card information, account details, and government-issued identification data. In total, around 172,000 customers may have been impacted.

What Happened With the Connex Data Breach?

Connex said it first noticed “unusual activity” on its network on June 3, 2025. An investigation later revealed that the attackers gained access the day before, stealing customer information. While Connex claims there is “no reason to believe” funds or accounts were accessed, the stolen data is still highly valuable to cybercriminals.

Despite the seriousness of the breach, customers were not notified until around August 7, 2025—over two months after the intrusion occurred. 

Our law firm, Morgan & Morgan, is now investigating whether this delay may have violated state and federal notification laws, as Connecticut requires companies to inform consumers of breaches without unreasonable delay, and no later than 60 days after discovery.

The Real Threat to Consumers’ Safety

The stolen information goes far beyond email addresses or phone numbers. With access to Social Security numbers, debit card details, and government IDs, hackers can:

• Open fraudulent bank or credit accounts in victims’ names
• Commit identity theft or tax fraud
• Run wire fraud and other financial scams
• Launch targeted phishing attacks or spread malware

Even if money wasn’t directly stolen from bank accounts, the risks to affected customers remain extremely high.

What Connex Is Offering

In response, Connex is offering 12 months of free credit monitoring and identity theft protection through Cyberscout. While these services can help detect fraudulent activity, they may not be enough to prevent long-term financial harm, especially since stolen Social Security numbers and IDs can be exploited for years.

How to Protect Yourself After the Breach

If you are a Connex Credit Union customer, here are steps you should take immediately:

1. Enroll in the free credit monitoring provided by Connex.
   
    
2. Monitor your bank statements and credit reports closely for suspicious activity.
   
    
3. Consider a fraud alert or credit freeze with the major credit bureaus to prevent criminals from opening new accounts in your name.
   
    
4. Be cautious of phishing attempts. Scammers may use stolen data to send convincing emails, texts, or phone calls to trick you into giving up even more information.
   
    
5. File your taxes early to help reduce the risk of tax fraud in your name.

6. Contact Morgan & Morgan if you suspect your information was stolen due to Connex’s negligence.
   
    

Your Data Should Have Been Kept Safe, and You Should Have Been Notified When It Wasn’t. Morgan & Morgan Is Here to Help.

When companies keep your sensitive data on file, they owe you a duty of care to keep it protected from potential threats.

However, beyond Connex’s alleged lax security, one of the most troubling aspects of this incident is the potential delay in notifying customers. 

If Connex Credit Union failed to meet the required notification deadlines, it may be held accountable under state or federal law. Consumers who suffered financial harm as a result of the breach or the delayed response may be entitled to compensation.

At Morgan & Morgan, we believe consumers should not have to bear the burden when companies fail to protect sensitive data. Data breaches can cause lasting harm, from damaged credit to years of identity theft headaches. If you were impacted by the Connex Credit Union breach, you may have legal options.

Our attorneys are actively investigating this case and are committed to holding negligent companies accountable. With more than 1,000 lawyers nationwide and a proven track record of standing up for consumers, we fight For the People, not the powerful.

If you believe your information was compromised in this breach, contact Morgan & Morgan today for a free case evaluation.