Erik Stitt was sorting though his finances on Michigan State University's Federal Credit Union website Wednesday afternoon when..."all of a sudden, all these alerts came up. Everybody got an email saying there had been a phishing scam." The email alerted him not to open another email sent a few hours earlier; one that looked like it was sent from the Federal Credit Union.

"I didn't even have time to notice that the false email was in my in-box before I saw the warning," he described. "As soon as I got the email warning about it, I put it straight in the garbage."

The message asked for personal financial information, such as credit card numbers. It also stated that immediate action was required. MSUFCU Executive Vice President April Clobes explains they would never send such a notice: "No financial institution would ever send you an email asking you for that data. A) We have it, and B) It's not secure for you to provide that in an email."

Out of their 170,000 members, only a handful were affected and all of their accounts have been reset. MSUFCU is glad the damage wasn't worse, especially with a cyber crime nearly impossible to trace. "We really have spent many years educating everyone about being secure online and I think as a result, most people didn't fall for it," said Clobes.

No MSUFCU members have lost any money to the scam yet, but the credit union is promising refunds if it happens in the future.