We Built the Cooperative That Failed and Skipped the One That Catches It

Key Takeaways from This Blog:

• The TruStage outage exposes a systemic concentration risk: credit unions have built critical shared infrastructure without creating meaningful redundancy when a dominant provider fails.
• The industry has seen this pattern before: the corporate credit union crisis showed how cooperative infrastructure can become a system-wide vulnerability when too many institutions depend on the same providers.
• The solution does not have to wait for regulators: credit unions, leagues, and CUSOs could build reciprocal servicing and operational-continuity agreements so members still receive essential services during the next major outage.

On July 15, TruStage disclosed a cybersecurity incident and took portions of its network offline. Two days later, Bessemer System Federal Credit Union of Greenville, Pennsylvania filed a class action on behalf of every credit union in the country. As of August 3, President and CEO Terrance Williams said the company is rebuilding from the ground up and targeting mid-August recovery.

That is roughly a month of degraded operations. Nobody has yet confirmed that a single member record was taken.

Let me say the quiet part first. The people at TruStage are good operators who have served this movement for decades, and reporting suggests the incident may have started with an employee downloading a malicious file. If that holds, the lesson is not that TruStage was careless. It is that a company with real security investment, real talent, and real incentive to get this right still went dark for a month.

Now the part almost nobody covering this story has said out loud: TruStage is CUNA Mutual Group. Founded in Madison in 1935 by credit union pioneers, rebranded in 2023, today a mutual insurance holding company with $41.3 billion in assets. In their own words at the rebrand, born out of the credit union movement 88 years ago. A credit union just sued an institution the credit union movement created, on behalf of every credit union in America.

We are not the victims of this concentration. We are the authors of it. This movement has an unmatched talent for building a cooperative to solve any problem it cannot solve alone, and almost no track record of building the second one that catches us when the first fails.

A Month Is a Long Time When You Need Your Claim Paid

Credit unions lost GAP claims processing. That is a member whose car was totaled on the interstate and who owes more than the insurance check. Mechanical repair coverage went down. That is a member sitting in a service bay looking at a transmission quote. Payment protection stopped. That is a member who just lost a job or got a diagnosis. Some members could not reach account information at all, including 401(k) balances.

None of those people care about the forensic timeline. They called their credit union because that is who they trust when they heard that the system was down, and there was no other way to get help.

The entire premise of this movement is that we are the institution that picks up the phone. For about a month, a lot of us picked up the phone with nothing to offer.

We Have Run This Experiment Before

By 2010, five corporate credit unions, cooperatively owned by their retail credit union members, were liquidated by the NCUA. Those five held roughly 70% of the corporate system's assets and accounted for 98.6% of the credit union system's investment losses. NCUA estimated that absorbing the damage all at once would have failed about 1,000 consumer credit unions, with up to 1,200 more collapsing when the insurance fund charged for it. Credit unions paid $4.8 billion in assessments before the stabilization fund closed in 2017.

The failure modes are not the same. Corporates died of credit risk on mortgage securities. TruStage had an operational incident. What rhymes is the structure: shared infrastructure the movement built for excellent reasons, which grew until it carried system-wide risk, at which point every credit union discovered simultaneously that it had no alternative.

We took that $4.8 billion lesson and applied it to corporate credit unions. We applied it to nothing else we own.

Nobody Is Counting

NCUA publishes call report data on every federally insured credit union in the country. It publishes nothing on how many of them depend on a single provider for a member-facing service.

That is not an oversight. It is the law. Bank regulators have examined third-party service providers under the Bank Service Company Act for decades. NCUA has no such authority. It may review a credit union vendor only with that vendor's consent, and NCUA chairmen have told Congress that vendors routinely decline. Four consecutive board chairs going back to 2004 have asked for the authority. GAO, the Financial Stability Oversight Council, and NCUA's own inspector general have all recommended it.

It has not passed. The movement's own trade associations opposed it, citing cost, duplication with existing FFIEC examinations, and the breadth of the proposed powers. Those arguments are not frivolous. Examinations are expensive, and credit unions fund them.

But add it up anyway. We built the shared infrastructure. We concentrated our operations into it. Then we spent two decades making sure nobody was permitted to examine it.

TruStage says it protects 42 million consumer relationships. That number appears in marketing material. It should be read as a risk disclosure.

The Thing We Never Built

This movement federates for everything. For capital through the corporates. For liquidity through the Central Liquidity Facility. For insurance through the institution now called TruStage. For payments, for compliance, for advocacy, for data processing.

We have never once federated for operational continuity.

There is no arrangement anywhere in this industry under which one credit union processes another's claims when its provider goes dark. No reciprocal servicing pact. No mutual aid agreement of the kind fire departments sign with the next county over, which is a slightly embarrassing gap for a movement whose founding slogan is people helping people. Commercial banks built correspondent relationships for exactly this purpose a century ago. We are very good at building the cooperative that does the work. We have never built the one that stands by in case it stops.

That is solvable, and solvable at the league and CUSO level without waiting on Congress or NCUA. A reciprocal servicing agreement among twenty credit unions running different platforms costs almost nothing to draft and would have been worth a great deal in July.

The next outage is already scheduled. We just have not been told the date.