Mark RadarMARK RADAR
About
EN
Sign in
Event File FINTECH Credit Unions

TruStage Faces 14 Lawsuits After Monthslong Cyber Outage

1 reports · First detected 2026-08-13 · Last active 2026-08-13

TruStage provides financial, insurance and payment-protection services to credit unions and banks, making its systems part of the infrastructure that financial institutions rely on to serve customers. A cyberattack that disrupts those operations can expose institutions to business interruptions, data-security concerns and legal claims, while testing how responsibility is divided when a critical third-party vendor fails.

The attack left TruStage systems disrupted for months, according to the latest report, and the company has yet to determine whether customer information was compromised. The incident has now prompted at least 14 proposed class-action lawsuits. The cases seek to assign responsibility for cybersecurity safeguards and the response to the outage, potentially clarifying the legal exposure of TruStage as well as the credit unions and banks that use its services.

All Coverage

1 original reports

The Backstory

The history behind this event
Credit Union Sues TruStage Over Cybersecurity Outage2026-07-22 · 1 reports · similarity 0.88

Pennsylvania-based Bessemer System Credit Union relies on TruStage as a primary provider of financial and technology services. The dispute highlights the concentration risk created when smaller financial institutions outsource critical systems to third parties. It could also become an important test of whether credit unions and other financial institutions can force vendors to absorb costs tied to cybersecurity failures, rather than leaving institutions and their members to bear outage and recovery expenses.

Bessemer System has filed a proposed class action against TruStage after the vendor took its network offline in response to a cybersecurity incident, blocking members from services including access to 401(k) accounts. The available report did not specify the filing date, outage duration, number of affected members or damages sought. The case will turn partly on TruStage’s contractual obligations and whether its security failures or incident response breached duties owed to client institutions.

Mark Radar|MARK RADAR
All times are in Taipei time (GMT+8)