← The Atlantic Federal Credit Union

2026 Atlantic FCU — Mercadien vendor; member names

2026 Unknown records affected Share on X

Data compromised

Name plus additional fields redacted in the Massachusetts sample (Extra1). Mercadien California notices name SSNs for financial-institution work. Experian IdentityWorks offered, enrol by 26 February 2027, 833-918-4029. Census unpublished. recordsAffected 0.

Technical writeup

Mass AG 2026-1973. Client of mercadien-pc-cpas-2026-ca-20261012 / 20261020. Do not sum unnamed Mercadien credit unions.

Root cause

Named-client mailing for Mercadien, P.C. CPAs. AFCU provided member data for accounting and advisory work. After Mercadien investigated and notified AFCU, the credit union reviewed the take and mailed on 9 November 2026. AFCU systems are not described as reached. Aligns with existing Mercadien California notices (detected 7 November 2025; separate Sep-Oct 2025 vulnerability). Do not create a third Mercadien incident.

References

Breaches you may like

Sign in to monitor vendor exposures, observe your organization's attack surface and security posture, access timely breach intelligence, provision API credentials, and run external security scans—all within one consolidated, secure workspace.

Log in →