Navy Federal Credit Union settles class action over unauthorized personal loans

Navy Federal Credit Union, the largest credit union in the United States by assets and membership, has agreed to settle a class action lawsuit alleging that personal loans were opened on members’ accounts from devices the members did not recognize or authorize. The settlement, reported in mid-to-late September 2026, applies to members who had such loans originated on their accounts without their consent.

Under the settlement terms, Navy Federal agreed to cancel the affected loans, request that the associated tradelines be deleted from the three major consumer credit bureaus, and refund any payments members had already made toward the unauthorized loans. Eligible class members can also claim up to $250 in additional compensation, with a claims deadline of November 29, 2026, after which the settlement terms would no longer be available to members who have not filed.

The case adds to a run of scrutiny over how financial institutions authenticate loan originations and device access on member and customer accounts, an issue that has drawn attention across banks and credit unions as digital account-opening volume has grown. Separately, cybersecurity researchers reported in late September 2026 that an unprotected 378GB backup database associated with Navy Federal had been found exposed online, though the credit union’s response to that specific report and any connection between the two matters had not been detailed in the settlement filings.

Navy Federal serves millions of members across the military, veteran and Department of Defense community, making the scope of any account-security or unauthorized-loan issue at the credit union a matter of consequence well beyond a typical regional lender. Members who believe they were affected by unauthorized loan originations are directed to review the settlement claims process directly through the credit union or the settlement administrator ahead of the November deadline.