Important Notice About Vendor Incident
BECU is providing an update on the investigation of a network security issue at our third-party printing vendor and sharing information about how it impacts members.
Updated Aug. 8, 2022 (Previously updated July 25, 2022)
What Happened
On June 6, BECU was informed that our third-party printing vendor had experienced a network security incident that impacted their printing and notification services for our members and involved unauthorized access to certain data of some members. At that time, BECU took immediate measures to protect member information by suspending services with the vendor.
The vendor engaged a third-party forensics firm to investigate the incident to identify what data was accessed and to restore operations. We continued to communicate with the vendor regularly throughout the investigation to monitor and understand implications for members.
On July 5, we were able to determine what information was accessed after the third-party forensics firm analyzed the incident and provided their findings. We are satisfied with the steps the vendor has undertaken and have resumed regular operations.
As of July 25, we have begun notifying impacted members with letters sent via USPS mail. In the notification we sent to impacted members, we provided a dedicated phone number to call if they have questions or concerns. We take the security of our members' accounts and personal information very seriously and sincerely apologize for any inconvenience or concern this incident may cause.
As BECU resumed services with the vendor, members have been receiving their delayed statements and correspondence. All member statements should now be available. We expect that some delivery delays may continue for several weeks as we return to regular production schedules. Members may also have received some statements and correspondence out of order. We recognize the inconvenience and we appreciate your patience while we work to get caught up.
Who Is Affected?
We understand you may have concerns and we take these matters very seriously. We began mailing letters on July 25 to members whose data was impacted by the incident. Impacted members who have questions or concerns about this incident can call the dedicated phone number we provided in the notification we sent. We encourage you to refer to the FAQ below for steps to be proactive with your account security.
Our Commitment
Securing and protecting our members' privacy and sensitive information remains our highest priority. We continually monitor accounts for suspicious and unauthorized activity. We are communicating to all members whose data was impacted by the incident and provided an offer for free credit monitoring protection for reassurance and increased security.
When we were informed of the incident, BECU immediately suspended services with the vendor. As a result of this service interruption, delivery of monthly statements and other correspondence to members was delayed. We worked to provide alternative options during this time and implemented back-up processes for communication to members, as much as possible. We apologize for any inconvenience you may have experienced.
Additional FAQs
Was my information compromised?
A third-party forensics firm has completed their investigation and we have determined which members were affected by this incident. BECU began mailing letters on July 25 to members whose data was impacted by the incident. Impacted members who have questions or concerns about this incident can call the dedicated phone number we provided in the notification we sent.
What can I do to protect my data?Members impacted by this incident can review their notification letter for steps to take to protect their accounts, including an offer for free credit monitoring protection and suggestions to monitor their financial statements and credit reports for any suspicious or authorized activity, beginning in mid-May.
At all times, we encourage our members to be proactive with their own account security. Read more below to learn what you can do to protect yourself from ongoing potential threats.
The following are important steps you can take to secure your accounts, personal information, and identity:
- Monitor your accounts at all your financial institutions for fraudulent activity, such as new loans.
- Regularly review your credit report, at no cost, and without impact to your credit score.
- Sign up for alerts for your BECU accounts and credit cards so you can monitor debit and credit transactions.
- Protect your account in Online Banking. Take a moment to update your online account security options and add a code word for increased protection.
- Consider applying a credit freeze with all three credit reporting agencies. Learn more in these Federal Trade Commission credit freeze FAQs.
- Stay informed: The Federal Trade Commission (FTC) website provides information about current threats to consumers.
- Be aware: Criminals often use breaking news stories as opportunities to stage attacks. Verify phone calls, do not give out personal or financial information and watch out for phishing phone calls, emails, and SMS text messages.
Why was my monthly statement or correspondence delayed?
We apologize for the delay. The recent network security incident at our third-party printing vendor interrupted their printing and notification services for our members and involved unauthorized access to certain member data. BECU immediately suspended services with the vendor. As a result, delivery of monthly statements and other correspondence to members was delayed.
We expect that some delivery delays may continue for several weeks as we return to regular production schedules. We apologize for any inconvenience you may have experienced.
When will my monthly statements be available?
As BECU resumed services with its printing vendor, members have been receiving their delayed statements and correspondence. All member statements should now be available. Members may also receive some statements and correspondence out of order. We recognize the inconvenience and we appreciate your patience while we work to get caught up.
I was expecting a letter or notification (other than my statement) that I haven't received. Was that also impacted by this incident?
If you were you expecting another correspondence from BECU (in addition to your statement) that you haven't received, please send us a secure message in Online Banking or the mobile app, or call 800-233-2328.