Notice of Data Event

Summit National Bank is informing you of an event that may involve some of your personal information. Although we have received no indication of any actual or attempted identity theft or fraud as a result of this event, this notice provides information about the event, our response, and resources available to you to help protect your information from possible misuse, should you feel it is necessary to do so.

What Happened? On May 15, 2024, Summit National Bank discovered suspicious activity within a Summit National Bank email account. Summit National Bank quickly took steps to confirm the suspicious activity, and with the assistance of third-party forensic specialists, began an investigation to determine the nature and scope of the activity. Summit National Bank determined that an unauthorized actor gained access to the affected email account on May 13, 2024, and accessed and could have potentially acquired the contents of that email account between May 13, 2024 to May 16, 2024. As a result, Summit National Bank initiated a review of the type of data located within that email account to assess the type of information involved and to whom it related. It was determined that the contents of the email account could include personal information for current and former bank customers dating back to 2009. We completed this process on July 12, 2024, and then moved as quickly as possible to notify potentially affected individuals.

What Information Was Involved? The investigation determined that customer name, Social Security number, contact information and financial account information were potentially accessible in the email account involved.

What We Are Doing. The confidentiality, privacy, and security of information in our care are among our highest priorities. Upon becoming aware of the event, we moved quickly to investigate and respond to the event, assess, and further strengthen the security of our systems and computer environment, and notify potentially affected individuals.

What You Can Do. We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and credit reports for suspicious activity and to report any suspicious activity promptly to your bank, credit card company, or other applicable institution over the next 12 to 24 months. Additional information and resources are included in the below Steps You Can Take To Protect Personal Information.

For More Information. We understand that you may have questions about this event that are not addressed in this notice. If you have additional questions, please call the dedicated assistance line at 1-800-758-1741, from 9 a.m. to 5 p.m. MST, excluding major U.S. holidays. Again, we take the privacy and security of information in our care very seriously and sincerely regret any inconvenience or concern this event may cause you.