Credit Union Sues TruStage Over Cybersecurity Outage

Pennsylvania-based Bessemer System Credit Union relies on TruStage as a primary provider of financial and technology services. The dispute highlights the concentration risk created when smaller financial institutions outsource critical systems to third parties. It could also become an important test of whether credit unions and other financial institutions can force vendors to absorb costs tied to cybersecurity failures, rather than leaving institutions and their members to bear outage and recovery expenses.

Bessemer System has filed a proposed class action against TruStage after the vendor took its network offline in response to a cybersecurity incident, blocking members from services including access to 401(k) accounts. The available report did not specify the filing date, outage duration, number of affected members or damages sought. The case will turn partly on TruStage’s contractual obligations and whether its security failures or incident response breached duties owed to client institutions.