- Status
- Confirmed breach
- People affected
- Not reported yet
- Reported
- 21 August 2026
- Breach began
- 20 May 2025
- Found to notice
- 11 days (found 10 August 2026, by the company’s letter)
- Time to tell
- 458 days (the median in California’s notices over the last year: 154 days)
What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
How it happened
- How
- Insider
a former employee potentially accessed and/or exfiltrated a limited amount of documents without authorization
source
What the letter says
- Found
we discovered on August 10, 2026, that the files that were potentially accessed and/or removed from the network contain some of your personal information
- Began
On or about May 20, 2025, POLAM FCU learned that a former employee potentially accessed and/or exfiltrated a limited amount of documents without authorization
- Exposed
The potentially impacted files contained your full name and the following:
Got a letter or email about this breach? Check it is real →
Read the letter (PDF), as filed with the California Attorney General.
Sources
Official notices are read by code from the regulator’s own register. More notices to California. · Corrections and changes