Distributed Denial of Service (DDoS)

+ Expand All

Member convenience is important, so we apologize for recent website downtime. UFCU, together with other financial institutions, was targeted by a Distributed Denial of Service (DDoS) attack and may again be targeted in the future. A DDoS event does not compromise member data. The intent of a DDoS attack is to disrupt Internet service. We take these events and announcements very seriously and are working diligently to mitigate future service interruptions.

Please read the following FAQs for more information.

• + What is a DDoS attack?

  DDoS = Distributed Denial of Service. The objective of a DDoS attack is to overwhelm a website with requests for service, preventing Internet-based services from working as intended. When UFCU's Internet Service Provider (ISP) detects such an event and the resulting bottleneck, it intentionally disables ufcu.org, making the website temporarily unavailable. While member data is thereby protected, unfortunately Internet service is disrupted.

• + How does this affect service to members?

  Unfortunately, since the website is unavailable, online banking becomes unavailable.

  Try one of these alternative methods to perform your desired transaction(s):

  • Mobile Banking: Available via smart phone or other mobile device
    • View account history item descriptions
    • Access most account balances including Credit Card and Mortgage balances
    • ATM/branch locator
    • Mobile Deposit (on most approved devices)
  • branch or Shared Branch (depending on type of transaction)
  • Contact Center
  • Telephone banking
  • ATMs
• + Was member information at risk?

  No. The nature of traffic directed at UFCU prompted our ISP to stop accepting requests. Also, UFCU's security infrastructure is positioned to block such traffic before reaching UFCU's network. Keep in mind the objective of a DDoS event is not necessarily to attack a network, but rather to overwhelm it with excessive traffic, thereby draining system resources.

• + What are we doing to circumvent any disruption to the website and protect our members?

  We take these events and announcements seriously. The DDoS attacks are not targeting or hacking systems to obtain member data. UFCU deploys effective security measures to protect and guard member data. DDoS attacks cannot be 100% prevented. However, UFCU is working internally and with business partners to manage future DDoS events, including reduction of resulting system downtime.

• + More questions?

  Please contact Director of Marketing, Corina Watts at cwatts@ufcu.org