CRW

HomeWiki

Chevron

Last updatedView on consumerrights.wiki ↗

Work in progress
This article has been flagged for additional work. Treat its claims as provisional.
Stub
This article is a stub. The wiki community is still building it out.
Contents5
  1. Consumer impact summary
  2. Incidents
  3. MOVEit data breach at Chevron Federal Credit Union (2023)
  4. See also
  5. References

❗This article is a stub. You can help by expanding it.

A moderator needs to check the page before this notice can be removed. Visit the noticeboard or the #appeals channel in either Zulip or Discord to request removal.
More info ▼

An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.

Chevron
Basic information
Founded 10 September 1879
Legal Structure Public
Industry Gas
Also known as
Official website https://www.chevron.com/
Chevron Ad After Gas Payment
Advertisement after gas payment.

Chevron Corporation is an American energy corporation headquartered in San Ramon, California, which traces its origins to the 1879 founding of the Pacific Coast Oil Company.[1] The company has faced scrutiny over safety practices, privacy violations, and security vulnerabilities. Chevron Federal Credit Union (CFCU) is a credit union serving Chevron employees, with ties to the corporation.[2]

Consumer impact summary

Chevron's consumer-facing footprint is dominated by data-security incidents at Chevron Federal Credit Union (CFCU), the credit union serving its employees: the 2023 MOVEit file-transfer breach exposed the names and financial information of more than 90,000 customers,[3] and the resulting litigation concluded with a class settlement granted final approval in October 2026.[4] The company has also faced broader scrutiny over its safety practices and security vulnerabilities.[5]

Incidents

MOVEit data breach at Chevron Federal Credit Union (2023)

Chevron Customer Alert Letter
Chevron Customer Alert Letter

On May 31, 2023, Progress Software notified Chevron Federal Credit Union (CFCU) of a critical vulnerability in MOVEit, a widely used file transfer platform CFCU utilized to store and share large files. The union launched an investigation, initially finding no customer information leaked. In July, CFCU re-opened the investigation, discovering that hackers gained unauthorized access to their systems between May 30 and 31.[3]

On August 23, 2023, CFCU notified the Maine Attorney General about the MOVEit vulnerability, which resulted in unauthorized access to names and financial information affecting over 90,000 customers.[3] A class action lawsuit, Miller v. Chevron Federal Credit Union (3:23-cv-04629), was filed against CFCU on September 11, 2023, alleging failure to protect the personal information of current and former customers.[6] The lawsuit was transferred out of the Northern District of California to the District of Massachusetts on October 27, 2023,[7] and the case name updated as Miller v. Chevron Federal Credit Union (1:23-cv-12602).[8] The court docket proceeded under the name IN RE: MOVEit Customer Data Security Breach Litigation (1:23-md-03083).[9]

A motion for a class settlement was filed on April 22, 2026,[10] with preliminary approval issued on April 29, 2026.[11] Final approval was granted on October 15, 2026 and the case dismissed with prejudice.[12]

See also

References

  1. ↑ "Our History" (PDF). Chevron. 2023. Archived from the original (PDF) on 2026-01-11. Retrieved 2026-10-26.
  2. ↑ "Our History & Mission". Chevron Federal Credit Union. Archived from the original on 2026-06-11. Retrieved 2026-10-26.
  3. ↑ 3.0 3.1 3.2 "Chevron Federal Credit Union Files Notice of Data Breach Affecting Over 90k Consumers". JDsupra. 2023-08-29. Archived from the original on 2025-07-20. Retrieved 2026-02-21.
  4. ↑ "Order — Document #2150". Court Listener. 2026-10-15. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
  5. ↑ "Our History" (PDF). Chevron. 2023. Archived from the original (PDF) on 2026-01-11. Retrieved 2026-10-26.
  6. ↑ McCroskey, Kelsey (2024-03-14). "Chevron Federal Credit Union Failed to Protect Customer Data from Cyberattack, Class Action Says". Class Action.org. Archived from the original on 2025-11-09. Retrieved 2026-02-18.
  7. ↑ "Order Transferring Case — Document #14". Court Listener. 2023-10-27. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
  8. ↑ "Document #17". Court Listener. 2023-10-31. 17. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
  9. ↑ "IN RE: MOVEit Customer Data Security Breach Litigation (1:23-md-03083)". Court Listener. 2023-10-04. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
  10. ↑ "Motion for Settlement — Document #1794". Court Listener. 2026-04-22. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
  11. ↑ "Order — Document #1804". Court Listener. 2026-04-29. Archived from the original (PDF) on 2026-10-27. Retrieved 2026-10-26.
  12. ↑ "Order — Document #2150". Court Listener. 2026-10-15. Archived from the original on 2026-10-27. Retrieved 2026-10-26.
Filed under