TruStage Cybersecurity Incident
Like a majority of credit unions throughout the country, ICCU utilizes TruStage for several insurance-related services and limited investments. This includes debt protection on loans, AD&D, and other auto/home/life/health insurance products that members may purchase through TruStage. TruStage is responding to a cybersecurity incident that has affected portions of its technology environment. TruStage has reported that it proactively shut down parts of its network while it investigates the incident and works to restore services.
It is important to note that TruStage has no integration with ICCU systems, so our core systems, digital banking services, debit cards, credit cards, and member accounts have not been impacted by this incident. The issue is limited to TruStage's systems and services.
While member confidential information may be at risk through these insurance programs, TruStage has not indicated that member personal information was accessed, acquired, or misused as a result of this incident. TruStage's investigation remains ongoing, and ICCU’s Information Security Incident Response Team is monitoring the situation closely. Additional information will be provided as it becomes available.
As with any security incident, it is important to note that fraudsters may attempt to take advantage of this situation by impersonating TruStage (and, in fact, there have been reports of this taking place). Therefore, as always, we encourage members to remain vigilant and exercise caution when responding to unsolicited phone calls, emails, or text messages requesting personal or financial information. Members should avoid clicking links or providing sensitive information unless they have independently verified the source.
To assist members, TruStage has established the following resources: