BluPeak Credit Union

BluPeak Credit Union is a member-owned cooperative serving California communities, and its threat model is a familiar one: a consumer financial institution holding deposit, credit card, mortgage, auto and personal loan, and investment account data, now moving more of the member relationship onto digital rails. The attack surface spans checking and savings accounts, credit cards, mortgages, lending, and investment services - plus a refreshed digital banking experience, a new digital account-opening platform, and an AI-powered assistant supporting member service. Onboarding, identity, and conversational interfaces are where fraud, account takeover, and data exposure tend to concentrate.

The technical work sits across digital banking, AI-powered virtual assistance, financial technology platforms, and cloud/IT infrastructure modernization. That modernization is deliberate rather than incidental: the organization runs a three-year infrastructure strategy, which suggests security work is being done in the context of platform change - migration, integration, and re-architecture - rather than on a static estate. The AI assistant adds a domain that financial institutions are still learning to secure: model inputs, retrieval, prompt injection, and the boundary between automated service and member data access.

Culturally, BluPeak operates as a member-owned cooperative with an emphasis on personal member relationships, collaboration, and responsiveness, led by President and CEO Todd Tharp. Employees receive member-service training; the organization runs quarterly town halls and annual gatherings, contributes to disaster-relief efforts, finances renewable energy, and supports organizations working to expand clean water access - a stated mission that extends beyond conventional banking. Industry verticals include credit unions, banking, consumer financial services, mortgage lending, auto lending, investment services, and renewable energy financing. Further detail is available at https://blupeak.com/.