Call Us

Members Trust Company Data Breach

Posted on behalf of Arnold Law Firm on February 26, 2025 in Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH letter from Members Trust Company, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

On November 18, 2024, Members Trust Company (“MTC”) reported a significant cybersecurity incident to the Maine Attorney General’s Office. According to the notice, on October 16, 2023, MTC discovered that an unauthorized party had gained access to consumers’ private and sensitive personal information via an employee’s email between September 1, 2023 and October 17, 2023 (the “Data Breach”). The Data Breach has impacted approximately 11,854 individuals.

Recently, MTC began sending data breach notification letters to those affected by the Data Breach. Each notification letter includes one-year complimentary access to credit monitoring and identity theft protection services provided by Experian IdentityWorks. 

As the announcement was made only recently, MTC has not yet disclosed additional details. If you received a data breach notification letter from MTC, it indicates that you were affected by the Data Breach. 

MTC is a financial services company and is headquartered in Tampa, Florida. Founded in 1987, MTC was the first chartered trust and investment management company solely owned by credit unions, and offers a wide array of financial services, including trust and estate assistance, wealth management, institutional asset management, and retirement planning. With annual revenue of approximately $20 million, MTC employs around 70 people.

WHAT INFORMATION IS INVOLVED IN THE MEMBERS TRUST COMPANY DATA BREACH?

The type of compromised information varied among individuals and potentially included:

  • Full Names
  • Dates of Birth 
  • Driver’s License or State ID numbers
  • Financial Account numbers, including routing numbers
  • Social Security numbers
  • Credit or Debit Card numbers, including expiration dates and CVVs
  • International Tax IDs 
  • Passport numbers
  • Usernames/Email Addresses and Passwords
  • Limited Medical Information

This information is called your Personally Identifiable Information (“PII”). It tells others about you and is considered part of your identity. Businesses are required to secure this information or risk facing statutory penalties, among other legal penalties. Stolen PII can be used by identity thieves to engage in fraudulent activity using your identity. 

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. 

California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Members Trust Company, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.