Security Tips & cYBERSECURITY nEWS

Public Service Announcement
Regarding National Public Data breach

First State Bank of Uvalde was made aware of a nationwide data breach at National Public Data. Stolen data, including Social Security numbers and other Personally Identifiable Information (PII), was compromised. As a public service, we are advising our clients of this breach and possible actions to take. We recommend using extra caution with email and social media accounts and being aware of phishing attempts, which are efforts to obtain your personal information or access to accounts by misrepresenting the identity of the sender.

We recommend that clients follow all recommended industry best practices for security and fraud prevention, including but not limited to the following:

• Update antivirus protection: If you have not already done so, update your antivirus protection and perform security scans on all devices. If malware is found, most antivirus programs should be able to remove it, but you may need to seek reputable professional assistance in some cases.

• Update passwords: Update passwords for bank accounts, email accounts, social media accounts, and other services used. Ensure your updated passwords are strong and unique for each account. Passwords should include uppercase and lowercase letters, numbers, and special characters whenever possible and should never include personal information that a hacker could guess or obtain from stolen data.

• Use multifactor authentication: Enable multifactor authentication on any accounts or services that offer it to ensure proper identity verification.

• Check credit reports: Regularly check your credit report and report any unauthorized use of credit cards. If you notice any suspicious activity, you can ask credit bureaus to freeze your credit.

• Beware of phishing: The bank will never call, email or text requesting banking credentials of any kind.

• Identity Protection: There are companies like LifeLock and Experian that can help monitor your credit and watch for identity theft.

In response to this nationwide breach, we may require additional security verification for anyone requesting account information by phone, email or text.

For further information regarding this nationwide breach, you may visit the links below.
NationalPublicData.com Hack Exposes a Nation’s Data – Krebs on Security
2.9 billion records stolen in Social Security data hack, USDoD claims (usatoday.com)
Data Breach Exposes 3 Billion Personal Information Records | McAfee Blog

For Credit Monitoring information, you may visit the links below.
Experian Credit Monitoring
Life Lock by Norton
Besides the monitoring sites, there is www.identitytheft.gov (FTC) for reporting and further advice. You can also call the identity theft hotline at 1-877-IDTHEFT

Fight Fraud & Identity Theft

Protect your Identity

We are committed to help you fight fraud and identity theft. Identity theft is the most popular and profitable form of consumer fraud. It occurs when someone uses your personal information such as your name, social security number, credit card number or other identifying information, without your permission, to commit fraud or other crimes.

If you feel you have been a victim of Identity Theft, please contact First State Bank of Uvalde or visit IdentityTheft.gov. To report scams or fraud, please contact First State Bank of Uvalde or visit ReportFraud.ftc.gov.

Monitor your accounts

Keep track of transactions on your accounts by logging in to FSB's Online Banking or Mobile Banking services. Our website is: www.fsbuvalde.com.

CONSUMER AWARENESS-INTERNET SAFETY SUGGESTIONS

• Use a properly-configured firewall, whether on your PC and/or on your Internet router.
• Keep your system patched, especially your web browser and any other program that interacts with your web browser.
• Use current, auto-updating anti-virus and anti-spyware software.
• Be careful about trusting websites, especially those that require you to enter personal information. A website can generally be easily "forged" and look just like the original. The "padlock" icon doesn't necessarily mean you are at the right website, just that you are at a website that is using encryption to protect your data over the Internet. Be wary of any website that uses numbers in the address (e.g., http://22.22.22.22/index.html>http://22.22.22.22/index.html versus http://www.mybank.com/index.html) or has a country identifier at the end of the domain (e.g., < http://www.mybank.cm/>www.mybank.cn or www.mybank.ru versus www.mybank.com ).
• Be careful about clicking on links in email, they may be a trap. For example, links to legitimate, North American websites should never use IP addresses instead of names (e.g., http://22.22.22.22./index.html versus http://www.mybank.com/index.html) and should never end in a country identifier (e.g., www.mybank.cn or www.mybank.ru versus www.mybank.com).
• Do not respond to any e-mail that seems threatening or that asks for personal information. We will never ask for personal information by email, or send links to customers via email that direct them to the bank’s website.
• Generally speaking, do not use a public computer for anything that requires you to enter sensitive information, as it may be infected.

To Learn more about being safe online, visit the following link: https://www.staysafeonline.org/stay-safe-online/

Phishing

Phishing is when an attacker attempts to acquire information by masquerading as a trustworthy entity in an electronic communication. Phishing attacks are typically carried out through email, instant messaging, telephone calls, and text messages (SMS). Protect yourself from Phishing by not releasing personal information such as passwords and account numbers. First State Bank of Uvalde will NEVER contact you via phone or email to request this type of information. If you think that you may be a victim of Phishing or Identity Theft Fraud, contact us immediately at 830-278-6231 or send an email to FSBAcctServices@fsbuvalde.com.

Spoofing

Spoofing is the act of creating a fake website, email, etc. to mislead individuals into sharing sensitive information. Spoofs are typically made to look like they are legitimately published or sent by a trusted organization. Protect yourself from Spoofing by checking the web address (URL) of websites for slight variations in spelling or different domains. Do not click on links from non-trusted websites and if you are suspicious of a website, close it and contact the company directly.

Warning signs of potentially compromised computer systems

Anyone can be hacked. Here are some of the signs that you may have been hacked:

• Browser Redirection
• Anti-Virus reports infected file
• Suspicious or unauthorized accounts/programs
• System seems slow/sluggish
• Passwords no longer work

Protect your personal information:

• Do not carry your Social Security card in your wallet.
• Do not have personal information such as your Social Security number and driver's license number printed on your checks.
• Keep your unused checks in a safe place.
• Do not leave your purse, wallet, checkbook, or any other forms of identification in your car.
• Shred or tear up any documents containing banking or credit information, especially pre-approved credit offers, before you throw them away.
• Keep your PINs and passwords a secret. Do not write them down or share them with anyone. In the event you need to write your PIN and password down, keep it in a safe place.

Debit MasterCard & ATM Safety Tips

Never allow anyone access to your secret PIN. Anyone that possesses your Debit MasterCard, or ATM card, can take money from your account at a variety of locations.

Never give out confidential information about your cards over the phone to anyone. Your bank already has the information and would never ask you to provide it over the phone. Phone scams are a growing problem nationally.

Block the view of others when you are using your cards at a store checkout.

Take another person with you when using outdoor ATMs or POS terminals at night.

When using outdoor ATMs or POS terminals, always observe your surroundings and leave if suspicious persons are nearby.

Treat your Debit MasterCard like cash. Always keep your card in a safe place. It's a good idea to store your card in a card sleeve. The sleeve protects the card's magnetic strip and helps ensure that the card functions properly.

If you receive cash back from a transaction, always put it away before leaving the location.

Be certain to retrieve your cards and review/retain your receipts before leaving a terminal. Do not abandon or discard your receipts where others can get them.