Fairmont Federal Credit Union Data Breach Lawsuit: 187,038 People, No Settlement
Active Litigation
Intruders were inside Fairmont Federal Credit Union’s network from September 30 to October 18, 2023. The West Virginia credit union learned of it on January 23, 2024, but letters only started going out on September 11, 2025. It reported 187,038 people to Maine’s Attorney General. Within days, class actions were filed in federal court in West Virginia. As of October 2026 there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened in the Fairmont Federal Credit Union Data Breach
Fairmont Federal Credit Union (FFCU) has corporate offices in Fairmont, West Virginia, and nine regional branches in the state. Its own notice of the incident says an unauthorized party accessed or took files between September 30 and October 18, 2023. FFCU became aware of the incident on January 23, 2024. It finished reviewing the files on or about August 17, 2025, and began notifying people on September 11, 2025.
The list of data fields is unusually long. It includes names, dates of birth, addresses, Social Security numbers, passport and driver’s license numbers, and account and routing numbers. It also includes debit and credit card numbers with security codes or PINs and expiration dates, IRS PINs, diagnosis and prescription details, Medicare/Medicaid numbers, login credentials, and security questions and answers. The notice says not every field was exposed for every person. SecurityWeek reported that it appears a ransomware group listed the credit union on its leak site the same day FFCU discovered the incident. The credit union did not say who was responsible.
The lawsuits allege that FFCU failed to protect this data and waited too long to warn members. That second point is the gap of almost two years between the break-in and the letters.
Case details
Three class actions were filed against FFCU in the U.S. District Court for the Northern District of West Virginia:
Butler v. Fairmont Federal Credit Union, No. 1:25-cv-00094, was filed September 16, 2025, and is assigned to Judge John Preston Bailey. FFCU moved to dismiss under Rules 12(b)(1) and 12(b)(6). On February 18, 2026, it asked for more time to file its reply. The docket shows filings as late as September 22, 2026.
Ortner v. Fairmont Federal Credit Union, No. 1:25-cv-00098, was filed September 24, 2025, and assigned to Judge Thomas Shawn Kleeh. The court index we checked shows no closing date.
Basagic v. Fairmont Federal Credit Union, No. 1:25-cv-00096, was filed September 22, 2025, also before Judge Kleeh. It was closed on November 4, 2025. The records we could check do not say why.
Separate suits were reportedly filed in state court in Marion County, West Virginia. We could not confirm their number or case numbers.
Status: Lawsuits Pending, No Settlement
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Would Be in the Class
The complaints propose classes of people whose information was exposed in the Fairmont Federal Credit Union data breach. FFCU reported 187,038 of them to the Maine Attorney General. You do not sign up for a class action now. If a class is certified or a settlement is approved, notices go out to class members.
The practical test is your mailbox. FFCU began mailing letters on September 11, 2025. Keep the letter: it is your best proof that you are in the class. If you were a member but are unsure whether you were notified, FFCU’s response line is 888-562-7091, Monday to Friday, 9 a.m. to 9 p.m. Eastern. A news report said the line would be staffed for 90 days, so it may no longer be answered.
What the Case Could Pay
Fairmont FCU Breach Timeline
September 30 – October 18, 2023 — The Intrusion
An unauthorized party accesses or takes files from FFCU’s network, according to the credit union’s notice.
January 23, 2024 — FFCU Learns of It
The credit union becomes aware of the incident and brings in outside cybersecurity investigators.
August 17, 2025 — File Review Ends
On or about this date, FFCU concludes which files held personal information. That is nineteen months after discovery.
September 11, 2025 — Letters Go Out
Notification begins. FFCU reports 187,038 affected people to the Maine Attorney General and offers credit monitoring.
September 16–24, 2025 — Three Federal Suits
Butler (1:25-cv-00094), Basagic (1:25-cv-00096) and Ortner (1:25-cv-00098) are filed in the Northern District of West Virginia.
2026 — Motion to Dismiss, No Settlement
FFCU filed a motion to dismiss in Butler. We could not confirm whether the court has ruled on it. As of October 18, 2026, we found no settlement, claim form or deadline.
Three Things to Watch For
This breach exposed card security codes, IRS PINs and security answers, which makes follow-up scams more convincing:
Calls or texts “from Fairmont FCU fraud”
A caller who knows your card number, or your answer to a security question, may sound like the real fraud department. Hang up and call the number on the back of your card. Never read out a PIN or one-time code.
“Claim your Fairmont settlement” pages
There is no settlement and no claims site. A page that asks for your Social Security number or account number to “secure your payment” is collecting data, not filing a claim.
Tax refund fraud using your IRS PIN
IRS PINs and tax ID numbers were among the exposed fields. If the IRS says a return was already filed in your name, report it to the IRS rather than responding to an email or text that claims to be the IRS.
Fairmont FCU Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Fairmont Federal Credit Union data breach lawsuit?
Yes. Three class actions were filed in September 2025 in the U.S. District Court for the Northern District of West Virginia: Butler (1:25-cv-00094), Basagic (1:25-cv-00096) and Ortner (1:25-cv-00098). Basagic closed on November 4, 2025. As of October 2026, Butler is pending with a motion to dismiss on file. Suits were also reportedly filed in Marion County state court.
How many people were affected by the Fairmont Federal Credit Union data breach?
187,038, according to what the credit union told the Maine Attorney General when it began notifying people in September 2025.
What information was exposed?
According to FFCU’s notice, the exposed data could include names, dates of birth, addresses, Social Security numbers and government ID numbers. It could also include account and routing numbers, card numbers with security codes and expiration dates, IRS PINs, health and insurance details, login credentials, and security questions. Not every field applied to every person. Your letter lists your own.
Is there a settlement or claim form?
No. As of October 2026, no settlement has been announced and there is no claim form, fund or deadline. If that changes, class members will be notified by a court-appointed administrator.
Why did it take almost two years to notify people?
FFCU says it learned of the incident on January 23, 2024, and finished reviewing the affected files on or about August 17, 2025. Letters began September 11, 2025. The lawsuits allege that this delay harmed members. FFCU has not conceded that, and it has moved to dismiss the Butler case.
Is the Fairmont FCU breach letter real?
The credit union has published a notice of the incident online, and its response line is 888-562-7091. Check that the letter’s dates and phone number match. Do not call a number from an unexpected email or text.
What is the typical payout per person for a data breach settlement?
It varies too much to give one number, and nothing has been agreed here. Per-person payments depend on the fund size, the number of claims, and whether you can document losses. Our payout calculator shows how those factors interact. You can also browse open settlements that are taking claims now.
What should I do right now?
Freeze your credit at all three bureaus. It is free and reversible. Ask Fairmont FCU to replace any debit or credit card on file in 2023, and change your online banking password and security questions. Enroll in the offered credit monitoring if you are still within the deadline, and keep your notice letter.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay you
- Class Action Payout CalculatorHow fund size and claim rates shape your check
- Navy Federal LawsuitA separate credit union case with an open claim form