NCUA Review Finds No Bank Secrecy Act Data Breach

ALEXANDRIA, Va. (Feb. 8, 2019) – The National Credit Union Administration makes protection of sensitive data a top priority, and the agency uses a defense-in-depth approach to monitoring and shielding its systems and information.

Upon learning of the recent spear phishing campaign targeting Bank Secrecy Act officers at credit unions, the NCUA conducted a comprehensive review of its security logs and alerts. This review is completed, and it did not find any indication that information was compromised.

The most recent information available indicates the campaign extends beyond credit unions to other parts of the financial sector.

The NCUA encourages all credit union staff to be wary of suspicious emails, and credit unions may report suspicious activity to the agency. Additional information about phishing and other information security concerns is available on the agency’s Cybersecurity Resources webpage.