ABS Business Notice

Notice of Data Breach


American Bank Systems (“ABS”) provides electronic loan administration software to its bank partners, including Midland National Bank, now known as Union State Bank.  ABS was recently the victim of an incident that may affect the privacy of some Midland Bank commercial customers' company information.
 
ABS will send written notification to you if your company information was compromised during the data breach. 

We take the protection of your information very seriously, and although ABS has no evidence of identity theft or fraud as a result of this incident, the information below provides details of the incident, ABS's response, and resources available to you to help protect your company's information from possible misuse, should you feel it is appropriate to do so.

On October 22, 2020, ABS became aware that it was victimized by a cybercriminal and certain systems were infected with malware, which resulted in disruptions to certain ABS operations. ABS immediately took systems offline and launched an investigation into the nature and scope of the incident.

With the assistance of third-party computer forensic specialists, ABS is working to investigate the source of the disruption, confirm its impact on their systems, and restore full functionality to their systems as soon as possible. The investigation determined that certain documents stored within ABS’s environment were subject to unauthorized access or acquisition.

On November 16, 2020, ABS's investigation determined that information related to Midland National Bank's, now known as Union State Bank's customers was part of the information affected. ABS provided notice of the incident to Union State Bank on November 19, 2020 and worked to determine address information to provide notice of the incident. 
ABS's investigation determined that the company names and/or private data of commercial customers of the former Midland National Bank were present in the documents that were identified as accessed or taken by the unauthorized actor. At this time, ABS is unaware of any identity theft or fraud as a result of this incident.
Information privacy and security are among our highest priorities. Upon discovering this incident, ABS immediately took steps to assess the security of their systems and mitigate the impact of this incident, including by resetting passwords of ABS users. They also reviewed existing security policies and implemented additional measures, including advanced endpoint monitoring, to further protect information in their care.

Although ABS is unaware of any identity theft or fraud as a result of this incident, they are offering you access to 12 months of credit monitoring and identity theft protection services through TransUnion at no cost to you as an added precaution. If you wish to activate these services, you may follow the instructions included in the Steps You Can Take to Protect Your Information section below. We encourage you to enroll in these services as we are unable to act on your behalf to do so.
We encourage you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious activity and to detect errors for the next 12 to 24 months. If you suspect fraud in your accounts, please report such activity to Union State Bank - Call Toll Free at (866) 557-0060 during business hours or send us a Secure Email from within Union State Bank's Online Banking. Please review the Steps You Can Take to Protect Your Information, provided below.
We understand that you may have questions about this incident that are not addressed in this letter. If so, please contact ABS's toll-free dedicated assistance line at 855-914-4705 between 8:00 am and 8:00 pm CST, Monday through Friday. You may also write to ABS at 14000 Parkway Commons Drive, Oklahoma City, Oklahoma 73134.
Enroll in Credit Monitoring
As a safeguard, we have arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for 12 months provided by TransUnion Interactive, a subsidiary of TransUnion,® one of the three nationwide credit reporting companies.

How to Enroll: You can sign up online or via U.S. mail delivery
 
·        To enroll in this service, go to the myTrueIdentity website at www.MyTrueIdentity.com and, in the space referenced as “Enter Activation Code,” enter the 12-letter Activation Code provided in your mailed notification and follow the three steps to receive your credit monitoring service online within minutes.

·        If you do not have access to the Internet and wish to enroll in a similar offline, paper-based credit monitoring service, via U.S. mail delivery, please call the TransUnion Fraud Response Services toll-free hotline at 1-855-288-5422. When prompted, enter the six-digit telephone passcode provided in your mailed notification and follow the steps to enroll in the offline credit monitoring service, add an initial fraud alert to your credit file, or to speak to a TransUnion representative if you believe you may be a victim of identity theft.

You can sign up for the online or offline credit monitoring service anytime between now and April 30, 2021.  Due to privacy laws, we cannot register you directly. Please note that credit monitoring services might not be available for individuals who do not have a credit file with TransUnion or an address in the United States (or its territories) and a valid Social Security number. Enrolling in this service will not affect your credit score.
·        Once you are enrolled, you will be able to obtain 12 months of unlimited access to your TransUnion credit report and credit score.

·        The daily credit monitoring service will notify you if there are any critical changes to your credit file at TransUnion, including fraud alerts, new inquiries, new accounts, new public records, late payments, changes of address, and more.

·        The service also includes access to an identity restoration program that provides assistance in the event that your identity is compromised and up to $1,000,000 in identity theft insurance with no deductible. (Policy limitations and exclusions may apply.)
Under U.S. law you are entitled to one free credit report annually from each of the three major credit reporting bureaus. We recommend periodically obtaining credit reports from each nationwide credit reporting agency and have information relating to fraudulent transactions deleted.

To order your free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. You may also contact the three major credit bureaus listed below directly to request a free copy of your credit report.
You have the right to place a “security freeze” on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. The security freeze is designed to prevent credit, loans, and services from being approved in your name without your consent.

However, you should be aware that using a security freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, you cannot be charged to place or lift a security freeze on your credit report.

Should you wish to place a security freeze, please contact the major consumer reporting agencies listed below:
Experian
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
www.experian.com/freeze/center.html

TransUnion
P.O. Box 160
Woodlyn, PA 19094
1-888-909-8872
www.transunion.com/credit-freeze

Equifax
P.O. Box 105788
Atlanta, GA 30348-5788
1-800-685-1111
www.equifax.com/personal/credit-report-services

In order to request a security freeze, you will need to provide the following information:
1. Your full name (including middle initial as well as Jr., Sr., II, III, etc.);
2. Social Security number;
3. Date of birth;
4. If you have moved in the past five (5) years, the addresses where you have lived over the prior five years;
5. Proof of current address, such as a current utility bill or telephone bill;
6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, etc.);
7. If you are a victim of identity theft, a copy of either the police report, investigative report, or complaint to a law enforcement agency concerning identity theft.
As an alternative to a security freeze, you have the right to place an initial or extended “fraud alert” on your file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should you wish to place a fraud alert, please contact any one of the agencies listed below:

Experian
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
www.experian.com/fraud/center.html

TransUnion
P.O. Box 2000
Chester, PA 19016
1-800-680-7289
www.transunion.com/fraud-victim-resource/place-fraud-alert

Equifax
P.O. Box 105069
Atlanta, GA 30348
1-888-766-0008
www.equifax.com/personal/credit-report-services