Tens of thousands of Americans are now at risk of identity theft and fraud after a financial services firm suffered a major cybersecurity incident.

In a new filing with the Office of the Maine Attorney General, the Connecticut-based Connex Credit Union says 172,000 people are impacted by a massive data breach.

-->

Connex says its systems flashed signs of suspicious activity in early June, leading to an investigation that revealed an unauthorized entity had accessed the firm’s database. The credit union notes that the hacker may have stolen files that may contain customer names, account numbers, debit card records, Social Security numbers and other government ID details used to open an account.

“Connex experienced unusual activity in its cyber environment on June 3, 2025, and immediately started an investigation using independent experts to assist. The investigation revealed that certain files may have been accessed or downloaded without authorization between June 2 and 3, 2025. Connex thereafter worked to identify the individuals whose information was potentially involved in the incident. On July 27, 2025, Connex identified certain individuals whose personal information may have been involved in the incident.” 

Connex is a financial services firm holding more $1 billion in assets, offering high-yield checking, consumer loans, online and mobile banking and ATMs.

The credit union says it immediately sent letters of notification to affected members. Connex also highlights that it has no reason to believe the incident involved unauthorized access to customer accounts or funds.

For now, Connex is offering affected customers 12 months of free credit and identity protection services through Cyberscout.

Follow us on X, Facebook and Telegram