Scam Alert: We have been alerted that someone may be spoofing our 1-800-531-2328 and 512-435-4545 numbers to tell members they have fraud on their debit card and attempt to gather personal information. Please remember to not provide any information to someone who calls you and requests personal information. If you're not comfortable with a call you receive claiming to be UHCU, hang up and call UHCU directly. 
Back to Articles

Credential Stuffing Attacks on the Rise

Credential stuffing attacks are on the rise and it's important for our members to know how to protect their information online.  A credential stuffing attack is when usernames and passwords are leaked in data breaches, often at online retailers and then used to access other accounts.  Your usernames and passwords may be sold to criminals who use them to get access to your online accounts.  This happens most frequently when the same username and password are used on more than one account.

Where are attacks happening?

These attacks are happening to many online retailers and financial institutions, but the attacks have happened to other online entities and apps as well.  If you are using the same combination of username and passwords for more than one account, you could be a target. 

How can you protect yourself?

You can protect yourself by creating unique usernames and passwords across different online accounts. Avoid using your email address as your username when possible.  Changing your passwords regularly can also cut the risk of these attacks.  Strong passwords should include capital letters, numbers and special characters. 

What are we doing to protect you?

As always, to help protect you and your financial information, UHCU actively blocks these types of attacks and alerts you when an unsuccessful login attempt has occurred.  Remember, UHCU will never call you to ask for your username, password or secure access code.  Contact UHCU if you have any questions or doubts about the security of your account.  We’re here with you, every step of the way!

Credential Stuffing Attacks on the Rise
Security Security Center