Public Employees Credit Union Listed by Avoslocker Ransomware Group

On December 26, 2022, the avoslocker ransomware group listed Public Employees Credit Union on its leak site, claiming to have exfiltrated confidential files belonging to all 29,000 members. The listing states that the stolen data includes names, addresses, Social Security numbers, telephone numbers, email addresses, credit card details, loan applications, and IRS documents, and includes a small sample as proof.

Reported Details from the Listing

The avoslocker leak site posting, preserved via ransomware.live, explicitly names Public Employees Credit Union and asserts that internal files were taken during a ransomware attack. It does not specify the exact date of initial compromise or the volume of documents beyond the claim of coverage for all 29,000 members. The disclosure indicates that the files contain highly sensitive personal and financial information that could be used for identity theft or fraud. No ransom demand amount is stated in the public listing, and it remains unclear whether any negotiation occurred before the data was published.

Why This Matters for You and Your Family

If you or any member of your family has an account, loan, or relationship with Public Employees Credit Union, your personal information may now be in the hands of criminals. SSNs, credit card numbers, and IRS documents are especially dangerous because they allow thieves to file fraudulent tax returns, open new accounts in your name, or drain existing ones. Even if you do not recall being a member, shared addresses or joint loan applications can pull in spouses, children, or household members. The breach exposes ordinary people who trusted a credit union with their financial lives, not just large corporations.

Doxxing and Identity-Chain Risks

Once names, addresses, emails, and phone numbers are public, attackers can link them across dozens of other services. A single leaked email and password combination from this claimed breach can lead to account takeovers on retail sites, social media, or even children’s gaming accounts. Those gaming profiles often contain additional personal details or payment methods that further enrich the identity profile. The result is a cascading doxxing chain where one breach exposes far more than the original credit union records. Public reporting on similar incidents shows that such data sets are quickly repackaged and sold on underground forums, increasing the long-term risk of harassment, targeted scams, or financial fraud against you and your family.

AvosLocker’s Known Track Record

Public reporting attributes the emergence of AvosLocker to mid-2021. The group has targeted organizations across healthcare, education, and financial sectors, including several credit unions and municipal entities. Their typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by claimed exfiltration of sensitive files before deploying ransomware. When payment is not received, AvosLocker publishes samples and eventually the full dataset on their leak site, applying steady pressure through countdown timers and direct victim contact. The group has shown willingness to name individual victims and release small proof files, exactly as seen in the Public Employees Credit Union listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at Public Employees Credit Union anywhere else it is reused, and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests across data brokers and extortion sites on your behalf while you focus on securing accounts.

The incident underscores that credit union breaches continue to place everyday families at risk long after the initial listing. Starting your DoxxScan trial gives you continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts where credential leaks frequently cascade into takeovers and doxxing chains. Source: https://www.ransomware.live/id/UHVibGljIEVtcGxveWVlcyBDcmVkaXQgVW5pb24@YXZvc2xvY2tlcg==