Cyber Incident Victim: Mountain Valley Federal Credit Union
Date:
Nov 2023
Location:
United States of America
Summary
Mountain Valley Federal Credit Union experienced a significant system disruption affecting its data processing capabilities and online banking platform, attributed to issues with a shared data processor impacting multiple credit unions. While core transaction services including debit card usage, ATM withdrawals, and branch operations remained functional, members could not access digital banking services during the outage. The organization acknowledged the inconvenience and assured members that restoration efforts were progressing, though full recovery required additional time due to the scale of the multi-institutional impact.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Mountain Valley Federal Credit Union experienced a significant disruption to its data processing systems beginning on or around November 26, 2023. As of December 4, 2023, the credit union's core systems remained non-operational, preventing access to online banking services for members. The outage stemmed from issues affecting the institution's third-party data processor, which also impacted multiple other credit unions serviced by the same provider. Technical teams worked to restore functionality, but the scale of affected institutions and complexity of required recovery efforts prolonged the downtime beyond initial expectations. Members could not access digital banking platforms during this period, though physical banking operations continued with limitations.
The credit union implemented contingency measures to maintain partial services while systems were offline. Members retained the ability to use debit cards for transactions, withdraw cash via ATMs, and conduct in-person transactions at any of Mountain Valley's four branch locations in Peru, AuSable Forks, Keeseville, and Wilmington. CEO Maggie F. Pope issued direct communications to members on December 4, acknowledging the ongoing disruption and apologizing for the inconvenience. The credit union directed members requiring assistance to contact branch staff by phone but provided no specific restoration timeline beyond indicating resolution would require "a little more time." No data compromise or financial losses were disclosed in available communications. Restoration efforts focused on bringing the online banking platform back online through coordinated work with the external data processor.