Patelco Credit Union Breach: What You Need to Know About the Recent Ransomware Attack

In this live video, we cover the recent ransomware attack on Patelco Credit Union that has left nearly half a million members without access to their banking services.
We will discuss what happened, who Patelco is, how customers have been impacted, potential long-term issues, and what Patelco customers should do post-breach.
Join us for an early look at this significant cybersecurity incident.
Don't forget to like, subscribe, and hit the notification bell for more updates on cybersecurity!
Understanding Your Business Risk To Getting Hacked is as Easy As 1 2 3....Learn more
cybersecurity.xitx.com/risk-a...
Work with the DoD? Don't lose your DoD contracts because of CMMC. Get help today.
getready4cmmc.com/webinar
The FTC isn't messing around, either. Make sure your company doesn't get fined for lax cybersecurity. Learn more at:
ftcsafeguardscompliance.com/
Are you not sure where to start with cybersecurity?
We can help.
Contact us at: www.xitx.com/call/
📱Connect With Cybersecurity Expert - Bryan Hornung 📱
Email us: [e-mail]
Learn everything we do to make I.T. better: www.xitx.com
Facebook: / bryanmhornung
Instagram: / xactceo
Twitter: / xactceo
LinkedIn: / bryanhornung

[@moonlight01011]

I have accounts at Patelco, but I also have accounts at 3 other credit unions, so the impact to me is minimal. With breaches becoming the new normal, it's risky to bank at only one financial institution.

[@UpUpDnDnLtRtLtRtBAStart]

You're still posting this comment across multiple videos. I seen this same post days ago. Get over it.

[@XactCyber]

Smart thinking not putting all your eggs in one basket!

[@angelisraels7465]

Exactly what I was thinking… I live here in the Bay Area, what y’all y’all think about CEFCU ?…

[@jamms2966]

If I worked in their call center they had better be doubling my pay to deal with all the angry customers

[@XactCyber]

Great point. Companies do not understand the onslaught of calls they get when cyberattacks happen. Most need to increase staff in that area, and it should be included as part of an incident response plan. Companies that don't increase staff tell us they were not properly prepared.

[@nespar1541]

@@XactCyberThey would most likely ask call center agents to do more ot's.

[@miracledarkstar]

They regularly use low level employees as scapegoats to cover up what goes on at their management and above levels. They will blame anyone they can at low level positions. Pure fact.

[@miracledarkstar]

Their call centers are untrained and uneducated on any of this. They will have a generic statement ordered by executives to say. At that point they will only say something along the lines of please check back with us when we have more information for you.

[@jjacks0182]

No communication at all -calling is a waist of time

[@jart-y9r]

I am a customer. This has been a nightmare! Live near two branches within walking distance of each other. I am able to get cash at ATM's. No in-branch services. Call center advised to open a new account at a different bank, to get my direct deposit. Will not be staying a member!!

[@gainesj1]

Whoa! I’m a customer as well… I have other accounts but this was my primary.

[@sugahatch7026]

This is my primary bank. I have accounts in other places . This isn't good!

[@XactCyber]

Wow, this sounds like a massive hassle, and I can't blame you for being frustrated. Hopefully, they'll restore full functionality soon.

[@BILLSCHLICHER]

I'm a customer as well. This is a secondary account for us which we have to spread our accounts. After this, I'm thinking I'll need to move our account. It's unfortunate for sure....

[@lisalynch2222]

I am a long time patelco credit union member for 25 years. This has never happened before! This is why you should always have at least 4 bank accounts with $$ in all of the just in case! My mom and Dad said why do you have so many accounts? For occasions like this! I will tell you this, I can use my credit card and debit account just fine. You just can't see what is in your account.😢 I was able to get my job to send my funds direct deposit thank God. But yes, this is the blue print for other banks to have similar problems! So hopefully they take note!

[@rainkings4862]

I hope by next week things go back to normal for us members. It's terrible right before the first of the month too. I am doing the best I can widow and all with kids and thankfully I had cash on hand. I wonder if Patelco could be sued due to the fact this is affecting the livelihoods of customers.

[@XactCyber]

This is a tough situation, but you're doing a great job taking care of your family! Yes, lawsuits will probably come out as a result of this cyberattack.

[@Predictbauer]

Just found your channel as I’m affected by this ransomware. Debits still work. And I was able to use Amex app to transfer “most” of my money out to my high yield savings, though I’m not sure what my actual balance is. I will not be banking at patelco after this they were great up until this fiasco. Anyway just subbed to your podcast, thanks for reporting on this and giving practical actionable advice.

[@XactCyber]

Thank you!

[@michaelking550]

Im a member.. I didnt find out until monday.. I called them! I will be moving all my money, the first chance i get!!

[@XactCyber]

I hear you completely! Thanks for sharing your experience with us.

[@bemad7886]

I'm a customer. I don't know how much money is in my account and today I was alerted all ATMs were inaccessible today. Had to notify my work to request a written check because direct deposit won't work.

[@XactCyber]

I'm sorry to hear about your experience. Hopefully, they can sort things out soon for you.

[@russellmiller7177]

How did it even happen in the first place. They really fucked up. Im so pissed and annoyed

[@XactCyber]

No doubt

[@AshGreen359]

It could happen to anyone at any time. Cyber security is a high demand ocupation that is in short supply. It is also a difficult field to get into because no one wants to train anyone. You must have experience to get a job to get experience. This is due to the shortage in personnel, when cyber security are hired, it's usually during a dire emergency and they want people who know everything right away. So the supply of labor will always be short

[@silviobarretta7118]

I am a customer and feel like a character out of a movie where all of my financial accounts are frozen by the FBI!

[@XactCyber]

This is a stressful situation, but hoping for the best outcome for you!

[@bemad7886]

I'm a customer. Lost my debit card 2 days after the incident. Walk into my local branch to cancel my debit card. "No can do" so it's submitted to cancel but apparently it can still be charged and they will "reimburse me for any payments made". My card was stolen after leaving it at an ATM. Don't know what's to come next :/

[@XactCyber]

I'm very sorry to hear about your experience, it must have been stressful. I heard they're back online so hopefully, this is sorted for you now.

[@celestialtl]

Too bad they insist on no paper and online account info only…now who knows what my balance really was before the attack

[@nameuser4406]

There is backups

[@XactCyber]

I hear you! It's hard to be sure about your pre-attack balance without prior downloaded statements. Hopefully, Patelco will be able to restore full, accurate transaction history.

[@johnthompson7548]

I work in IT for a MSP before that as internal IT. I’m constantly amazed that people don’t take cyber security seriously. I worked for a nursing home in MA. The COO at the time now CEO, got pretty violent with me when I brought up this issue. I have people get pretty annoyed about having 2FA or a password manager. I think for cyber insurance or the FTC, they should talk to current and former IT support staff. See how IT was treated when trying to enforce cybersecurity measures.

[@XactCyber]

Totally hear you! As an MSP owner myself, I can completely relate to your experience. It's frustrating when those in charge don't prioritize cybersecurity. Getting everyone on board can be a real challenge. Thank you for sharing your experience and adding value to the discussion!

[@TacoTomtheBomb]

I stopped doing online banking about 5 years ago because it is not safe in my opinion, and as a Patelco member that makes me feel a little better.

[@RK-wu3oe]

Then how do you check your account status?

[@TacoTomtheBomb]

@@RK-wu3oe I get a monthly statement, atm receipts, or call them, just like I have my entire life except for a period of a few years where I used online banking. See my computer hot hacked and I decided to lower my risk, and not because I am concerned about the bank's security but because home computers and cell phones are much more easily hacked if focused on.

[@XactCyber]

Wow, respect! Managing banking manually would be really hard for many people because almost everyone relies on online banking these days, me included.

[@TacoTomtheBomb]

@@XactCyber I get most people use it for convenience, but what is there to manage? I have direct deposits, write a few checks and have my credit cards automatically paid. I always know within 5% what the balance is and leave an ample cushion for mistakes. Its easy to me, but I grew up that way too. Have a good one.

[@journeyoflovelight]

This is my CU. Its a mess.

[@THiiZKiid]

I heard you can go to a branch and pull $500 out tho?

[@journeyoflovelight]

@@THiiZKiid $500.00 From ATMs too. Although the ATMs were down for awhile yesterday .

[@XactCyber]

😓

[@jealousofmypuddin]

Thank you!

[@XactCyber]

Thank you for your support!

[@halfdohm]

Patelco is a great credit union. Its too bad it happened to them. This impacts half a million people so its pretty significant. They need to up security measures to a much higher level.

[@XactCyber]

Too bad really. So many people are affected. This is a wake-up call for them to ramp up their cybersecurity.

[@sandrafitzgerald1722]

I am a customer and quite worried about my savings. In the process of securing a mortgage and this is really really concerning. Paychecks not being deposited, have travel plans but worried about not paying for expenses and just a huge nightmare! I hope there is money left in there once its up and running...

[@XactCyber]

I get why you're worried. I hope this nightmare ends soon and things get back to normal for you.

[@SFOxiv]

This is nuts but it seems like the new norm now!!!! Its happening everywhere but it’s not being publicized so we need to be safe with our information

[@XactCyber]

Exactly! Cyberattacks are happening all the time, but only the biggest companies make headlines.

[@cicireed2820]

I'm a patelco member, and this has got to be one of the worst things I've gone through. Even bigger, I now live in southern CA, and as you know, Patelco is only in Northern CA. I decided not to close the accord due to all my direct deposits. Now, I'm really irritated. At least if I still lived in northern california, I'd be offered the option of going into the bank to withdraw money, at a sum of up to $500.00. But, bc I'm here, I'm just waiting. This is horrible! I need groceries, gas, and other essentials. What am I gonna do now?!?😢

[@XactCyber]

I'm really sorry to hear about your situation. 💔Have you tried calling their customer service line? They might have options for out-of-area members during this disruption.

[@shawyonsharifi3394]

Cant u withdraw from any ATM but u just have to pay a fee?

[@2LITerD]

I’m on day 4 of not being able to access any of accounts. The lines are out the door in the Bay Area ! Please keep us update !

[@XactCyber]

I know this is super frustrating! Stay strong! 💪

[@SinisterSpatula]

Any chance you can increase the volume of your mic? Very low and hard to hear. These breaches are becoming way too common. Seems like very little is being done to prevent them, and the only thing done after the fact is to offer credit monitoring to affected people. This is a losing battle, and it gets worse by the day.

[@XactCyber]

why are you so sure?

[@XactCyber]

We evaluate security practices all the time and I would say most companies do very little or not even the basics

[@umbertocalvini7429]

I plan to move all my cash from Patelco to Charles Schwab! 💪

[@XactCyber]

💪

[@conniepost5351]

we are on day 11 , and they are not being transparent about the severity, their plan, and its' clear they were not prepared at all!

[@XactCyber]

Yes, they're not prepared at all.

[@dangerouspickle69420]

just got a loan and opened an account with them to pay for wedding expenses 2 days before the attack. My wedding is 2 weeks away and i need to pay the vendors today and tomorrow so im beyond fucked

[@XactCyber]

Wow, what a difficult situation. 😟I hope everything works out for you and that your wedding is amazing despite this setback.

[@dangerouspickle69420]

@@XactCyber thank you so much we are trying and will make it work even without family help

[@MrJuarez4]

All of my account are basically frozen. Can’t pay my bills, direct deposit and no Zelle. Minimal things you can do in person as well!!!!

[@XactCyber]

That sounds stressful. 😓 Hoping this gets fixed by Patelco ASAP.

[@mbethely1]

I am a customer. Very curious how they are going to track my past funds. Its pretty much spending money blindly at this point. I went on a trip to Mexico shortly before this occurred. I am very curious what time of impact this will have

[@XactCyber]

Not having online access can really make you lose track of your spending. Patelco should have systems in place to track past transactions.

[@justrad19]

This can happen at any financial institution.

[@XactCyber]

You're right. No bank is immune. It's how they respond to cyberattacks that will make the difference.

[@ghostchaser13]

UGH! 😢

[@XactCyber]

😓

[@karensanders1233]

My partner and I both have accounts there. He has all his money there and I have most of my money there. Can you tell us something more about what typically happens in a case like this in terms of achieving full recovery of all transactions? Is it possible that they will lose some transactions either incoming or outgoing? Will they have a mechanism to recreate lost transactions? Will we have to prove what we should have with them? I always download my statements and I did a Quicken download 2 days before the breach, so I know where I should be. But I’ve seen many people say they don’t download statements and they rely strictly on on-line access. Would this level of transaction loss trigger the lawsuit you mentioned? Thanks.

[@sldghamr1]

I use quicken & have a Patelco account. I NEVER use the download transaction function. The reason being that if someone hacks my computer, they now have my account login info also. i always manually input my transactions.

[@XactCyber]

This is definitely a concern a lot of folks have. Normally, banks and credit unions like Patelco have backups in place. This way, they can restore transaction records in case of cyberattacks. They should have ways to recover transactions from their records. But we don't know if this is the case for Patelco yet, and every cyberattack is different. It's still early days, so we can't say for sure about full recovery yet. Yes, a lawsuit might be an option way down the line in a worst-case scenario.

[@karensanders1233]

@@XactCyberthank you! Patelco has new statement on their update page.

[@chocolatesmile]

@@XactCyberthere were already 2 lawsuits filed this week, one in Alameda County and the other in San Francisco County so the class actions are already starting!

[@R-Chronicles]

I've been a customer since 2017... 😢😢😢 I can't believe this but always felt 💔 that they had security weaknesses...

[@XactCyber]

😢

[@jackeylamb9396]

Well I’m not sure how to pay my first car payment.. lol what does this mean? What do I do ? Could I be penalized? I totally just found out today .

[@XactCyber]

I can understand your frustration. Latest news says they're back online. It's also best if you speak directly with their customer support about this.

[@cardinalstar2048]

You would be shocked how much the Board spends on annual retreats planning for these issues. They should have really been prepared for this. I am additionally not shocked as many institutions are focused on DEI initiatives etc.

[@XactCyber]

You're right, preparedness is key. While DEI is important, cybersecurity shouldn't be neglected.

[@cardinalstar2048]

@@XactCyber I totally agree! 👍

[@oliviarobinson6047]

Yes Yes, I walked into the ATM branch of Patelco Credit Union. I'm effected as well.. I'm so pisst off. I have deadlines!! Could not pull a dime out of the ATM. So upsetting 😢😢🤔🤔🤨😔 Makes me want to close the account when this is all fixed.. Awful..

[@XactCyber]

That sounds really frustrating. News says they now allow ATM withdrawal, although it's still limited to $500.

[@RayGsells]

What bank or CU is next? They are all vulnerable…

[@XactCyber]

Yes they are 😓

[@AshGreen359]

The grand plan is for JP Morgan Chase to be our only option

[@jcombs5495]

It's all planned 😢.

[@XactCyber]

🙃

[@monicawong3908]

That's what I was thinking too! Can you send me some info please?​@@jcombs5495

[@jazzyman1023]

How do one change one's password when you can't get in during a system hack?

[@XactCyber]

You're right! You can do so once systems are functional again. In the meantime, be cautious of any phishing emails you might receive claiming to be from Patelco.

[@XactCyber]

Change your passwords on other sites if you use the same or similar password as you used with Patelco.

[@jazzyman1023]

​@@XactCyberThank you.

[@magicunicorn6535]

I'm treading water right now when it comes to paying my bills. If this gets resolved soon, I'll likely forgive it and remain with Patelco. But if it happens again, I'll probably go elsewhere.

[@XactCyber]

I understand your frustration, thank you for sharing your experience here.

[@CaliGoober]

Long lines in front of my local branch. Very few being let inside and no answers from reps

[@XactCyber]

It must be really stressful for the customers and the cashiers alike. Thanks for sharing your experience here.

[@RobustArid379]

Pate co has good interest rates

[@XactCyber]

👌

[@DPNITRAW]

Here come the lawsuits

[@XactCyber]

Oh well 🙂‍↕️

[@Quise916]

I have a car loan through them and haven’t heard anything about how to make payments!!! SMH

[@lanadelreytv3945]

i called and spoke to someone about this. They told me i don’t have to worry about payments until everything is back and running and there will be no late fees or late payments reported to the credit bureau

[@Quise916]

@@lanadelreytv3945 thanks

[@XactCyber]

I understand your frustration. Patelco should have given clear guidance about this from the start.

[@jbsbayarea1]

people are stupid and let this be a lesson. Keep depending on digital currency and not cash, the more information you have online and digital currency the more you'll likely you be hack or shut down.

[@XactCyber]

Keeping some cash on hand is always a good idea for sure.

[@markgideon23]

hopefully it's not a bank failure

[@RosettaStoned462]

It's 💯 not failure. Cyber attacks are happening frequently.

[@XactCyber]

There's not much information available yet, but Patelco has confirmed a ransomware attack. Hopefully, they'll provide more details about the cause in the coming days.

[@logical5136]

Credit unions are non profits you should know that.

[@XactCyber]

You're right, credit unions operate as non-profits.

[@anisabarakzai1657]

I am A customer I don’t have access to anything

[@XactCyber]

Latest news says they're partially back. Is it working for you yet?

[@angelisraels7465]

They been so good to us YOU MFS GOTTA GIVE THEM A BREAK SHIT HAPPENS

[@XactCyber]

I hear you, Patelco has a lot of loyal members. Hopefully they'll use this as a learning experience to improve their response to future attacks.

[@johnthompson7548]

Offshoring jobs is all fun and games until someone gets hacked.

[@XactCyber]

Organizations should definitely ensure that their offshore partners have strong cybersecurity measures as well.

[@saifbenaiyan3615]

I feel that owners dealed with hackers tracked all those billions of $$$ and they'll go for bankruptcy 🤦‍♂️ End of the story

[@XactCyber]

Let's see what happens. I'll keep you updated!

[@marx686]

After 42 years Im out of Patelco. They obviously cant do the job. Adios, Patelco.

[@XactCyber]

Wow, 42 years is a long time with a bank!

[@marx686]

@@XactCyber Telephone employees play the long game.

[@johnramos8685]

I will forget all this happen, if they pay off the rest of my car loan.😬

[@XactCyber]

😁

[@bobtarmac1828]

Did they use Ai to do this? Is it too late to cease Ai? Remember Hansel and Gretal and that scenario? Luring us in with sweets? Just to be… laid off by Ai, then… suffer human extinction? Or worse, imprisoned by an… ai new world order? Enforced by swell robotics popping up everywhere… replacing you with Ai jobloss?

[@XactCyber]

Actually, AI plays a role in both cyber defense and potentially in cyber attacks. It is a tool created and controlled by humans so we should be using AI ethically and securely to make our lives better, not replace us in scary robot uprisings! 😁

[@MarkJeffries-w5h]

Dont write checks your a** cant cash!!

[@XactCyber]

💯

[@dreadfuldonkey]

if man can create it, man can hack it, I don’t have any money, so go ahead take all my information. What the fuck do I care?

[@XactCyber]

That's a common attitude many people share.

[@nooneatall1784]

I have no money but I am also a victim of ongoing identity theft for the past 15 years. Trust me, you would care if it happened to you.

[@XactCyber]

You're right. I predict identity theft will become a bigger issue for many more people than we see today.

[@dreadfuldonkey]

@@nooneatall1784 filing for bankruptcy should’ve taken care of all that, everyone gets a new start multiple times

[@AshGreen359]

You could be put in some serious debt. But if your credit is bad maybe not

[@YoRAHeem]

We have no access to our accounts bc the attack likely deleted all of our credit line history. If we took our money out, they’d completely fail bc they can’t produce our records to say we owe and that’s what a big bank would buy. Gotta stop my direct deposit. It was great when it worked.

[@XactCyber]

I hear you, that's a scary situation. There's no confirmation data is lost yet, but definitely be cautious with direct deposit.