NOTICE OF DATA BREACH

First State Bank takes data security very seriously and we understand the importance of protecting the information we maintain. We are writing to inform you about an incident that may have involved some of your information. This notice explains the incident, measures we have taken, and some steps you can take in response.

WHAT HAPPENED?

On December 9, 2020, First State Bank concluded its investigation of a data security incident in which an unauthorized party accessed certain systems within First State Bank’s computer network. Upon discovering this incident, First State Bank immediately secured its systems and launched an investigation with the assistance of a computer forensics firm. Through this investigation, First State Bank determined that the unauthorized access occurred between November 2, 2020 and November 9, 2020.

WHAT INFORMATION WAS INVOLVED?

First State Bank determined that certain files on its computer network may have been accessed by the unauthorized party. Those files contained the names, Social Security numbers, and/or financial account numbers of some of our customers and their beneficiaries.

WHAT YOU CAN DO.

To date, First State Bank is not aware of the misuse of any of the information maintained on its computer network. Out of an abundance of caution, we encourage you to remain vigilant by reviewing your financial account statements for any unauthorized activity. If you see charges or activity you did not authorize, we suggest that you contact First State Bank immediately.  As a precaution, we are offering credit monitoring at no charge to those individuals who believe that they might be affected by this incident.  For more information or to sign up for credit monitoring, please contact First State Bank at 575-835-1550. 

WHAT WE ARE DOING.

First State Bank regrets any inconvenience or concern this may cause. To help prevent a similar incident from occurring in the future, we have implemented additional data security measures, such as installing new endpoint security monitoring software and providing employees with additional cybersecurity awareness training.

FOR MORE INFORMATION.

If you have any questions regarding this incident, please call First State Bank at 575-835-1550 Monday through Friday, from 9:00 a.m. to 5:00 p.m., Mountain Time.

ADDITIONAL STEPS YOU CAN TAKE.

We remind you it is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity over the next 12 to 24 months. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting companies is as follows:

• Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111
• Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742
• TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-916-8800

If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your state. You can obtain information from these sources about steps an individual can take to avoid identity theft as well as information about fraud alerts and security freezes. You should also contact your local law enforcement authorities and file a police report. Obtain a copy of the police report in case you are asked to provide copies to creditors to correct your records. Contact information for the Federal Trade Commission is as follows:

• Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue NW, Washington, DC 20580, 1-877-IDTHEFT (438-4338), www.ftc.gov/idtheft

Fraud Alerts and Credit or Security Freezes

Fraud Alerts: There are two types of general fraud alerts you can place on your credit report to put your creditors on notice that you may be a victim of fraud—an initial alert and an extended alert. You may ask that an initial fraud alert be placed on your credit report if you suspect you have been, or are about to be, a victim of identity theft. An initial fraud alert stays on your credit report for one year. You may have an extended alert placed on your credit report if you have already been a victim of identity theft with the appropriate documentary proof. An extended fraud alert stays on your credit report for seven years.

To place a fraud alert on your credit reports, contact one of the nationwide credit bureaus. A fraud alert is free. The credit bureau you contact must tell the other two, and all three will place an alert on their versions of your report.

For those in the military who want to protect their credit while deployed, an Active Duty Military Fraud Alert lasts for one year and can be renewed for the length of your deployment. The credit bureaus will also take you off their marketing lists for pre-screened credit card offers for two years, unless you ask them not to.

Credit or Security Freezes: You have the right to put a credit freeze, also known as a security freeze, on your credit file, free of charge, which makes it more difficult for identity thieves to open new accounts in your name. That’s because most creditors need to see your credit report before they approve a new account. If they can’t see your report, they may not extend the credit.

How do I place a freeze on my credit reports? There is no fee to place or lift a security freeze. Unlike a fraud alert, you must separately place a security freeze on your credit file at each credit reporting company. For information and instructions to place a security freeze, contact each of the credit reporting agencies at the addresses below:

• Experian Security Freeze, PO Box 9554, Allen, TX 75013, www.experian.com
• TransUnion Security Freeze, PO Box 2000, Chester, PA 19016, www.transunion.com
• Equifax Security Freeze, PO Box 105788, Atlanta, GA 30348, www.equifax.com

You'll need to supply your name, address, date of birth, Social Security number and other personal information.

After receiving your freeze request, each credit bureau will provide you with a unique PIN (personal identification number) or password. Keep the PIN or password in a safe place. You will need it if you choose to lift the freeze.

How do I lift a freeze? A freeze remains in place until you ask the credit bureau to temporarily lift it or remove it altogether. If the request is made online or by phone, a credit bureau must lift a freeze within one hour. If the request is made by mail, then the bureau must lift the freeze no later than three business days after getting your request.

If you opt for a temporary lift because you are applying for credit or a job, and you can find out which credit bureau the business will contact for your file, you can save some time by lifting the freeze only at that particular credit bureau. Otherwise, you need to make the request with all three credit bureaus.