Edelson Lechtzin Probes Fairwinds Credit Union Data Breach

The security failure occurred within the digital infrastructure of Mercadien, a company hired by Fairwinds for quality control and regulatory oversight. Unauthorized access to these systems took place between September 7 and November 7, 2025. Although Fairwinds discovered suspicious activity in November 2025, the institution did not finalize its internal review and begin notifying affected New Hampshire residents until September 23, 2026.

Personal details at risk include names, Social Security numbers, driver's license numbers, and financial account information. Edelson Lechtzin LLP is now offering free case evaluations to determine if affected individuals have grounds for legal action. The firm aims to recover compensation for damages related to identity theft and privacy loss, while potentially forcing the credit union to implement more rigorous security standards. In the wake of the incident, Fairwinds has severed its business relationship with Mercadien and initiated credit protection services for those impacted.