On February 1, 2021 the Washington State Auditors Office released a statement announcing a data breach at a third-party vendor. If you filed any unemployment claims in the last year you might be affected. Please visit the State Auditors Office website to read the full announcement and to keep up to date on the latest news.
What You Can Do
Enrolling in transaction alerting and credit monitoring is your best defense against breaches. Unfortunately we live in a world where we have to assume our information will get compromised in some type of breach. Customers should focus their efforts on being able to quickly detect fraudulent transactions, identity theft, or other suspicious activity. Some security professionals are labeling this an "assume breach mindset."
We recommend you change your State Auditors Office (SAO) website password and never use the old password again. If you use the same username and password anywhere else you should change it there as well. Although SAO hasn't said outright that passwords were compromised in the breach, customers should operate under the assumption that their SAO username and password was compromised and change it.
If you are concerned your personal data may have been affected by the breach, there are additional steps you can take to help protect yourself:
- Monitor your accounts and email regularly for any suspicious activity
- Enable Multi-Factor Authentication (MFA) for Online Banking
If you have not already done so, we strongly recommend turning on mutli-factor authentication for your Online Banking accounts at 1st Security Bank and elsewhere.
- Set Credit and Debit Card Transaction Notifications with CardValet
Turn your 1st Security Bank Credit or Debit card off when it is not in use, customize alerts to be notified when someone is using your card, set transaction limits, and more.
- Add a "Code Word" to your 1st Security Bank account
We offer customers the option to add a Code Word as an additional layer of security for accessing your 1st Security Bank account. Call your local branch to learn more and get started.
- Review Website Passwords
Check and update your passwords and consider enabling multi-factor authentication (MFA) for an additional layer of security when accessing your online accounts. Make sure to choose a password that is easy for you to remember but difficult for someone else to guess. Phrases can act as a powerful password.
Credential Stuffing Attacks are one of the biggest threats to customers. Compromised credentials often hold more value than other forms of personal information because hackers know people like to re-use and recycle old passwords across multiple websites. Your best defense against Credential Stuffing Attacks is to enable MFA whenever possible, and using unique and complex passwords for each of your accounts.
Password managers can be a helpful way to store and suggest strong passwords, especially if you have trouble remembering passwords.
If you are unsure if your information has been compromised in a reported data breach you can check www.haveibeenpwned.com to see if your accounts have been targeted.
- Place a Fraud Alert
Fraud Alerts last for 90 days and notifies creditors of possible fraudulent activity and requests that they contact you prior to opening and account in your name. To place a fraud alert on your credit reports, contact any of the three credit reporting agencies. Learn more at http://www.annualcreditreport.com
- Place a Credit Freeze
Washington State residents have the right to place a free security freeze on their credit file. This prevents new credit from being opened in your name without the use of a PIN that is issued to you when you initiate the freeze. Please be aware that a credit freeze may delay or interfere with your ability to obtain credit. You must place a security freeze with each credit reporting agency. For more information, please see the State Auditors Office website or visit www.identitytheft.gov for more information. Some states may charge to place a security freeze with a credit reporting agency.
- Get Your Free Credit Reports
You may also obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting http://www.annualcreditreport...., calling toll-free 877-322-8228 or by completing an Annual Credit Report Request form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta GA 30348. You can also contact one of the national credit reporting agencies.
P.O. Box 105851 Atlanta, GA 30348
P.O. Box 9532 Allen, TX 75013
P.O. Box 1000 Chester, PA 19016
Free Annual Report
P.O. Box 105281 Atlanta, GA 30348
Learn more at http://www.annualcreditreport.com
- Follow the Latest Cyber Security News and Tips
Stay on top of the latest security news and tips. One of our favorite trusted resources is the OUCH! Newsletter from Sans Security Awareness.
If you have any questions or concerns about your account please contact your local branch. We are more than happy to answer any questions you might have and to help ensure your account stays safe.