Franklin Mint Federal Credit Union Outage: What Happened and What Members Should Do

The 60-second summary

Franklin Mint Federal Credit Union, a roughly $2.2 billion credit union based in Chadds Ford, PA, went through a multi-day outage that took down its website, mobile app, and digital banking, and left it unable to email or text members. The credit union says the issue centers on its main website domain. It has not called the incident a hack, says member accounts were not compromised and funds are secure, and notes that core systems stayed up with transactions still processing. Public registration records indicate the fmfcu.org domain was moved to another registrar and briefly resolved to a domain-sale page. The cause has not been confirmed, and FMFCU is investigating with outside cybersecurity specialists.

What happened

The disruption began over a weekend and stretched into a second day. Members reported being unable to reach the credit union's website or mobile app, and the institution said it also could not send emails or text messages to members. FMFCU pointed to a problem with its main website domain as the center of the outage.

Importantly, the credit union stressed that its core systems stayed operational the entire time. Transactions continued to process, member funds remained secure, and debit cards still worked for purchases and at ATMs. In other words, the money and the core banking ledger were not the problem - the public-facing digital front door was.

Public domain-registration records indicate the fmfcu.org domain was transferred to a different registrar and, for a period, resolved to a page offering the domain for sale. FMFCU acknowledged technical issues with its main domain on its Facebook page and said it would email members once services were restored. For the latest, see NBC10 Responds' ongoing coverage.

Was it a hack? What we actually know

The honest answer, as of this writing: the cause has not been confirmed. FMFCU has not characterized the event as a hack, and it says member accounts were not compromised. In a statement, the credit union said it took steps to address the situation immediately and opened an investigation with help from external cybersecurity specialists.

Asked what could cause an outage like this, Matt framed the realistic range: it could be internal, like a bad software update, or it could be malicious, like ransomware. He also made a point that is easy to miss when an organization goes quiet during an incident.

"When we aren't given a lot of information, usually that's because the organization is still trying to assess what happened, get their arms around the incident, and understand the impact. Much like a police investigation, you don't release details until you're really sure about what's going on." - Matt Barnett, Founder & CEO, SEVN-X

A silent institution is not proof of a cover-up. More often it means a team is doing the unglamorous work of scoping an incident before it says something it will have to walk back.

If you are a member

What FMFCU members should do right now

• Use the channels that still work. Branches, ATMs, and the member service phone line are unaffected. Debit cards still work for purchases and cash.
• Check your automatic payments. Confirm that scheduled bills, transfers, and withdrawals are still going through so nothing is missed while online tools are down.
• Get updates from the official source. FMFCU is posting to its Facebook page and says it will email members once services are restored. Be skeptical of any other channel claiming to speak for the credit union.
• Treat any "bank" outreach as a scam until proven otherwise. Outages are prime time for phishing. If someone calls, texts, or emails asking for your account details, do not respond. Hang up and call the number on the back of your card.

The bigger lesson: your domain is critical infrastructure

Whatever the final cause turns out to be, this outage is a clean illustration of a risk most organizations underinvest in: the domain name itself. Your domain is the gateway to your website, your online banking, your customer app, and your email. Lose control of it and all of those go dark at once - even if every server and every account behind them is perfectly healthy.

Domains get lost in unglamorous ways: a registrar account without multi-factor authentication, a support agent social-engineered into approving a transfer, an expired registration, or a DNS change nobody caught. The controls that prevent it are cheap relative to the damage:

• Lock the domain. Enable registrar lock and, where available, registry lock so no transfer can be initiated without an out-of-band, manual approval.
• Harden the registrar account. Require MFA, limit who has access, and use a monitored role account rather than one person's personal login.
• Turn on DNSSEC and monitor for changes. Alert on any modification to your nameservers, registrar, or DNS records so a transfer or hijack is caught in minutes, not days.
• Automate renewals and audit ownership. Keep registration on auto-renew, confirm the domain is owned by the organization (not a former employee or agency), and keep recovery contacts current.

Frequently asked questions

FMFCU outage FAQ

Video transcript

Matt Barnett on NBC10 Responds

Transcript lightly edited for readability.

NBC10 anchor: Right now, a technical issue that's impacting online services for Franklin Mint Federal Credit Union customers. NBC10 Responds reporter Valeria Feliciano is live at a branch in University City. Valeria, first, how long has this outage been going on?

Valeria Feliciano: Franklin Mint Federal Credit Union first reported the outage almost 24 hours ago. Since then, customers have been unable to access its websites and digital banking features. The credit union has also not been able to send text messages or emails to its members.

NBC10 anchor: Do we know what's causing the outage?

Valeria Feliciano: Not exactly. The credit union says the issue involves their main website domain. NBC10 Responds reached out to cybersecurity expert Matt Barnett and asked him what could cause an outage like this one. He says it could be internal, like a bad software update, but it could also be malicious, like ransomware. Barnett says the fact that we haven't received many details from the credit union could mean they're still trying to figure out what happened.

Matt Barnett: When we aren't given a lot of information, usually that's because the organization is still trying to assess what happened, trying to get their arms around the incident, understand the impact. And much like a police investigation, you don't release details until you're really sure about what's going on.

Valeria Feliciano: The credit union says transactions are still processing. If you're having trouble accessing your account, you can visit a branch or ATM, or call the member service center. For now, updates are on the credit union's Facebook page, and FMFCU says it will email all members once services are restored, though there's no timeline yet. In a statement, the credit union said it immediately took steps to address the situation and commenced an investigation with assistance from external cybersecurity specialists. If your financial institution goes through an outage, call them first to ask what's happening and when service will be restored, monitor your automatic payments and withdrawals, and stay alert for scams. If anyone contacts you claiming to be the bank and asks for your account information, do not give it to them - contact the bank directly using the number on the back of your card.

Achieve better cybersecurity

Could your organization lose its front door?

SEVN-X helps banks, credit unions, and businesses find the gaps before an outage or attack does - from domain and attack-surface hardening to incident response and tabletop exercises.