Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: National Institutes of Health Federal Credit Union ("NIHFCU")
  • Street Address: P.O. Box 6475
  • City: Rockville
  • State, or Country if outside the US: Maryland
  • Zip Code: 20849-6475

Submitted By

  • Name: Michael Waters
  • Title: Shareholder
  • Firm name (if different than entity): Polsinelli PC, 150 N. Riverside Plaza, Ste 3000, Chicago, IL 60606
  • Telephone Number: 312-463-6212
  • Email Address: mwaters@polsinelli.com
  • Relationship to entity whose information was compromised: Attorney

Breach Information

  • Total number of persons affected (including residents): 14,706
  • Total number of Maine residents affected: 6
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 04/11/2023
  • Date Breach Discovered: 05/19/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 07/05/2023
  • Copy of notice to affected Maine residents: NIH FCU - Adult 1 Yr CM_ Proof_R1.pdf
  • Date of any previous (within 12 months) breach notifications: N/A
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 12 month, Experian, IdentityWorks Credit 3B identity protection services