Names, Social Security Numbers, Account Details and Other Sensitive Information of 20,722 Americans Potentially Exposed As Massachusetts Financial Firm Suffers Data Breach

A US financial firm is warning thousands of Americans that their personal information is at risk after its systems were breached.

New filings with Maine’s Attorney General show that a cyber attack of the MetroWest Community Federal Credit Union in Framingham, Massachusetts, may have exposed clients’ names, Social Security numbers, financial account numbers, routing numbers and payment card numbers.

In total, 20,722 people are impacted.

“On September 1st, 2025, MetroWest began receiving alerts for suspicious activity on certain systems in its network. Upon learning this, MetroWest launched an investigation with the assistance of third-party forensic specialists to determine the nature and scope of the activity. The forensic investigation determined that on September 3rd, 2025, there was unauthorized access to certain systems and certain files were copied without permission.

MetroWest undertook a comprehensive review of the data at risk to assess what sensitive information could be affected, and to whom it relates. MetroWest completed this review on January 12th and then worked to locate addresses for impacted individuals.”

MetroWest has reported the breach to the Federal Bureau of Investigation (FBI) and is offering those impacted free credit monitoring services for two years.

The financial firm also says it is training its employees to better protect personal information of its clients and is implementing “additional safeguards.”

Generated Image: Midjourney