1st MidAmerica Credit Union 2025 Data Breach

Indiana and Texas records identify the organization as 1st MidAmerica Credit Union. The entity name, notification period, and affected-resident subsets in both records tie them to the same event.

An independent law-firm investigation reports that an unauthorized person may have reached the credit union's files through a third-party vendor. Public official records do not disclose the precise access period, technique, or responsible actor, so this detail should not be treated as a confirmed technical root cause.

The Texas Attorney General record lists names, Social Security numbers, dates of birth, and financial account information among the possible data types.

The information involved may have varied by person. The full list should not be assumed to apply to every affected individual or to have been accessed together.

The Indiana Attorney General's 2026 report lists 131,070 affected people nationwide for the 1st MidAmerica Credit Union incident. It separately identifies 289 affected Indiana residents.

The 535 people in the Texas record are also a state-resident subset and should not be added to the national total. The 131,070 figure is the broadest published affected-person total.

A Social Security number and date of birth combined with a name can be used in identity theft, fraudulent credit applications, or new-account opening attempts.

Financial account information can make messages impersonating a credit union or payment provider appear more convincing. An accurate account detail in a message does not prove that the sender is legitimate.

Notice recipients should regularly review bank and credit union accounts and report transactions, new payees, or contact-detail changes they do not recognize directly to the institution.

Credit reports should be checked for unfamiliar inquiries or new accounts. Depending on individual risk, consider placing a free fraud alert or credit freeze.

Never provide a Social Security number, account detail, password, or verification code during an unsolicited call or message. Open 1stmidamerica.org independently instead of following a suspicious link.

The confirmed scope is limited to the August 14, 2025 incident reference associated with 1st MidAmerica Credit Union, 131,070 affected people, and recipient-variable identity and financial information. The exact access period, attack technique, responsible actor, and incident-related misuse were not confirmed in public official records.