In California, numerous local and federal lawsuits continue to pile up against Patelco Credit Union following a devastating cyber-attack that crippled the Dublin CA-based company’s online databases and left about half a million customers locked out of their accounts. If the suits are successful, Patelco could be facing damage payouts of as much as $5 billion, which equals half of the assets managed by the company.
So far, at least six federal and four state lawsuits, some of which seek class-action status, have been filed against Patelco since the 29 June attack and more are likely. Lawyers representing credit union members are arguing in court papers that Patelco failed to protect their personal information and negligently allowed an outside hacker to steal and abuse internal confidential information. Other allegations include breach of contract and invasion of privacy, according to the lawsuits.[1]
Patelco first announced the attack in an email and web post to customers on 29 June, at the same time locking customers out of their online bank accounts. This barred anyone, even Patelco tellers and administrators, from checking customer balances, sending or receiving online payments or even logging into their online accounts.
Throughout the two-week ordeal, Patelco continued to push out updates on a dedicated website to notify customers of service updates, such as when online payments through Zelle and PayPal were available. The lockout ended on 15 July 2024.
Mendez, in a message to customers on 18 July, said their “patience and loyalty during this incredibly difficult situation is deeply valued and appreciated by the entire Patelco team.” Mendez called the restoration of online banking services “a positive step forward” and added “we continue to work around the clock to support our members extending Patelco fee waivers in July and August, reimbursing fees, and providing late payment support.”
Patelco continues to offer fee waivers and reimbursements online and vowed to write letters in support of customers to various entities in the case of late fees on credit cards and other bills. Several customers, however, are now taking the matter to court. Two of the latest lawsuits against the credit union have come from the same man, Demetrio Abenoja, of Discovery Bay. He filed a lawsuit in Alameda County Superior Court on Wednesday seeking class-action status and one on Monday in the US District Court for the Northern District of California.
In California state court documents, Abenoja’s attorneys allege “Patelco’s unfair and deceptive conduct” caused customers “to unfairly incur substantial time and/or costs to mitigate and monitor” their private information. Attorneys allege Patelco’s handling of the cyber-attack was “unlawful and in violation of” the Federal Trade Commission’s regulations and laws. Other state lawsuits came from residents Shawn Kent, Anand Chaudry, Avishalom Klammer and Tangie Strong. Federal lawsuits were filed by residents Josh Warren, Eileen Poluk, Siobhan Gallagher, Sean McGinity and Darren Van Antwerp and Bradley Tanzman. The earliest lawsuits came on July 1 from Poluk, who filed in federal court. Poluk seeks to hold Patelco “responsible for the harms it caused” customers in the “massive and preventable” cyber-attack, according to court documents.
Her attorneys agrued that Poluk “suffered lost time, annoyance, interference and inconvenience” due to the attack. And she “has anxiety and increased concerns for the loss of privacy, as well as anxiety over the impact of cybercriminals accessing, using and selling” her information, the documents say.
This article is shared at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a notification service (RedXray) or an analysis service (CTAC). For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://register.gotowebinar.com/register/5378972949933166424
[1] https://www.msn.com/en-us/money/companies/federal-state-lawsuits-stack-up-against-patelco-following-cyber-attack-seeking-billions/ar-BB1qPwI7/
Comments