Redwood Credit Union traced the problem to the Raley's supermarket chain. Raley's also operates Nob Hill and Bel Air stores.
Money vanished from customer accounts after they used their ATM debit cards at those stores.
So far, 200 breaches have been reported. Officials say about 18,000 cards will get replaced.