REV Federal Credit Union is a not-for-profit, member-owned financial institution operating across North Carolina, South Carolina, and West Virginia. Founded in 1955, it holds over $1 billion in assets and serves more than 70,000 members with standard financial products - checking, savings, vehicle loans, mortgages, credit cards, business banking, and wealth management. It's also a low-income designated CDFI, which means it processes and stores sensitive financial data for a population that may be particularly vulnerable to fraud and identity theft.
For security professionals, the threat model here is straightforward: a mid-size credit union with a multi-state footprint handling high-value personal and financial data across retail banking, lending, and wealth management verticals. The attack surface spans online banking platforms, card processing systems, member data stores, and business banking channels. Compliance obligations under NCUA, GLBA, and likely PCI DSS frame the operational constraints. A CDFI designation may also introduce additional reporting and data handling requirements.
Without specifics on their internal security stack or team structure, what's clear from the outside is the operational context: protecting financial data for over 70,000 members across three states, with a culture that emphasizes community investment and long-term member relationships. That kind of institutional profile typically means security work that's deeply embedded in operations rather than siloed - think fraud prevention, access control, incident response, and securing member-facing digital channels in an environment where trust is the core product.
