Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

As of October 1, 2026, several U.S. credit unions have active, related lawsuits against Fiserv over alleged cybersecurity failures and misleading security representations. They are separate cases at different stages—not one nationwide class action—and the available court records and reporting do not establish final liability, damages, or a settlement.

What are the Fiserv credit union lawsuits about?

The disputes center on online-banking and related technology services that Fiserv provided to credit unions. Plaintiffs allege that security controls were inadequate and that Fiserv misrepresented the protections its services offered. Depending on the case, the allegations concern security practices, authentication, breach handling, and promises in contracts or security materials.

Those claims are allegations, not established findings. In a complaint filed in 2025, Cencap alleged that Fiserv promised “world-class cybersecurity but delivered insecurity and dangerous deception.” That is the plaintiff’s characterization, not a court’s conclusion.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The same complaint alleged that Fiserv’s Virtual Branch online-banking platform and Client360 portal had longstanding security problems and “routinely exposed over 9,000 credit union members to fraud, identify [sic] theft, and compromise.” The figure is an allegation in that complaint; it is not an independently verified count or a judicial finding.

Is the litigation still going on?

Yes. As of October 1, 2026, the cases described below remain at active procedural stages, but they are not all following the same schedule.

Case Jurisdiction and filing Allegations described in the available sources Procedural status as of October 1, 2026
Self-Help Credit Union North Carolina; docket shows a filing on December 4, 2025 Related cybersecurity and contract dispute; more specific allegations are not stated in the docket summary. The court ordered mediation in March 2026. The parties later litigated discovery and protective-order issues. Fiserv filed a motion to dismiss on March 23, 2026, and discovery motions were filed in April.
FiCare Federal Credit Union Florida; filed January 27, 2026 Related cybersecurity and contract dispute; more specific allegations are not stated in the available case summary. FiCare filed a second amended complaint on July 2, 2026. On July 6, the court denied an earlier dismissal motion as moot because of that amendment. The case-management order sets discovery due May 7, 2027, and dispositive motions due June 4, 2027.
Polam Federal Credit Union California; filing date not stated in the available report Payments Dive summarized Polam’s claim as alleging that deficient and misrepresented cybersecurity practices left systems and member information vulnerable to unauthorized access. On June 23, 2026, Payments Dive reported that Judge John Walter denied Fiserv’s motion to dismiss and allowed all eight claims to proceed. The judge said the issues would be better addressed at summary judgment after evidence was developed.

Payments Dive also identified related matters in New York and Indiana. Dockets were located for Midwest Family Federal Credit Union and Educational & Governmental Employees Federal Credit Union, but the available information does not establish their specific allegations or procedural status here.

Did a judge rule against Fiserv?

In Polam’s case, a judge denied Fiserv’s motion to dismiss, allowing all eight claims to proceed beyond that stage. That is a ruling on whether the claims could continue, not a final decision that Fiserv violated the law or its contracts. The reported order expressly left the issues for consideration after evidence is developed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

FiCare’s July 6, 2026 order was different: the court denied Fiserv’s earlier dismissal motion as moot after FiCare filed an amended complaint. That does not amount to a ruling on the truth of the amended allegations. The available information reports no final merits judgment in these cases.

Which credit unions are suing Fiserv?

The cases specifically described include Self-Help Credit Union, FiCare Federal Credit Union, and Polam Federal Credit Union. Payments Dive also reported related matters in New York and Indiana, and available dockets include Midwest Family Federal Credit Union and Educational & Governmental Employees Federal Credit Union. The available information does not provide enough detail to treat every matter as having the same claims or procedural status.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What could the cases clarify?

The disputes may help define how courts assess a technology vendor’s cybersecurity obligations and security representations in contracts with financial institutions. Any broader implications remain uncertain while the cases are unresolved; no outcome can yet be treated as a finding about Fiserv’s conduct across its services or customers.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.