Privacy UnpackedIncident · one vendor, 3 organisations
The Mercadien, P.C. CPAs breach
11 September 2026 to 12 October 2026
3 organisations on the tracker had data taken through Mercadien, P.C. CPAs, which reported its own breach on 12 October 2026. Each one is listed with the words of the source that names Mercadien, P.C. CPAs.
The vendor
Organisations affected through Mercadien, P.C. CPAs
-
Suffolk Federal Credit Union
Social Security numbersFinancial account and card detailsNames+1
674Texas residents
On or about November 7, 2025, Mercadien, P.C., CPAs ("Mercadien"), a former service provider to Suffolk Credit Union, detected unauthorized access to a portion of its computer environment.
notice letter -
Fairwinds Credit Union
Social Security numbersDriver’s license numbersNames+1
165.1Kpeople
We are writing to make you aware of a cybersecurity incident involving one of FAIRWINDS' external vendors, Mercadien, P.C. CPAs ("Mercadien").
notice letter
Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Mercadien, P.C. CPAs as the way its data was taken.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.