Encompass Credit Union data breach

Clerk's notes

Encompass Credit Union, operating in Indiana, has officially reported a data breach to regulatory authorities on September 25, 2026. This incident involved an unspecified breach type that resulted in the compromise of a wide range of sensitive personal and financial data. The investigation into the security event is currently in a monitoring status, as the full scope and impact are being assessed.

The reported exposed data categories include Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Login Credentials, Credit Score Information, and Transaction History. This combination of information is particularly concerning, as it provides malicious actors with the tools necessary for identity theft, unauthorized account access, and fraudulent financial activities. Individuals whose Social Security Numbers and Dates of Birth are exposed face an increased risk of new accounts being opened in their name or tax fraud.

Financial institutions like Encompass Credit Union are subject to rigorous federal and state regulations, such as the Gramm-Leach-Bliley Act, which mandate stringent data protection measures. The occurrence of such a breach suggests that these essential security protocols may have been circumvented or failed to adequately protect member data, indicating a potential lapse in the institution's duty of care.

If you have received a data breach notification letter from Encompass Credit Union, it serves as formal acknowledgment that your confidential information was compromised. Receiving this notice establishes a legal basis for individuals to explore their rights. Even without immediate financial loss, the significant risk of future identity theft posed by exposed data can be legally actionable. We encourage you to understand your options.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.