“We regret that such attacks may inconvenience our members,” said SECU President/CEO Jim Blaine. “We are certain that enhancing the reliability of our systems is a perpetual obligation and opportunity for our credit union. System integrity is not a one day event nor a one day concern for SECU. It's an everyday issue and commitment.”

Kevin Prince, chief technology officer at the Santa Ana, Calif.-based technology management firm Compushare, said the attack could be impactful, but added nobody knows how it could play out.

Compushare has worked on an FBI task force for a long time combating Anonymous cyberattacks, and Prince said the bureau “is having a hard time doing anything about it.” He described law enforcement attemtps to fight the loose collective of so-called hacktivists like chopping off one head, only to find two more have grown back in its place. Anonymous has called for other hacktivist groups to join them in planned cyberattacks, including the May 7 DDoS attack, he said.

Prince, who was a guest on CUNA's call, recently released a white paper that reassures small financial institutions they're not likely targets, but nonetheless provides ways to prepare in case they are, or simply worry they may be.

In reality, he said, there's very little a small credit union can do to stop a DDoS attack.

“You can't just tweak the firewall. It simply doesn't work that way,” he said.

Instead, Prince advised, credit unions should work with their internet service provider to stop the attack “upstream” before it gets to the credit union's website or online banking service.

Because most credit unions don't host their own online banking site, working instead with a third party provider or core processor, their prep time would be better spent reviewing third party due diligence than attempting to shore up their own connections, he said.

The white paper, titled “DDoS Attacks: How Real Are the Risks for Community Financial Institutions”, is available to be downloaded on Compushare's website.