Security Statement

Security Statement

In the world today technology is advancing at a pace never seen before in the history of humankind. While this growth is wonderful and brings a better standard of living to all of us it does still create new problems. Many of these problems are directly related to security and privacy of data. As high tech thieves find new ways to exploit consumers we on the other side of the battle work even more diligently to protect the consumer. However, consumers must also learn how to protect themselves from fraud and data security issues.

Protection provided for our customers

At Exchange Bank we believe that protecting our customer’s is very important. Everyday we take steps to help ensure the safety of our customer’s privileged information. The following is a list of things that we are doing to help protect you online.

Secure Log-On

We use in place encryption technology that protects the transmission of data between you the customer on our local computers. This is 256 Bit SSL encryption. To verify that you are in a protected area view the lock symbol in the bottom right hand bar of our web browser.

User ID and Password: Our internet banking system is designed to help you protect yourself by requiring a complex password. This practice is currently being utilized worldwide in an effort to help protect against online identity theft and fraud. Our system also only allows access to our customer’s which have a user ID and password and have been approved for Internet Banking by a bank employee.

Online Banking Timeout: Users will be logged off automatically after several minutes of being inactive with your online account. This can help prevent non-authorized users from gaining access to your account in the event that a user accidentally left a session logged on.

Multi-Step Authentication: Multi-Step Authentication is another layer of security added by Exchange Bank to help you protect your identity online. This solution is implemented to help stop criminal information attacks such as phishing and identity theft. Multi-Step Authentication uses a combination of secret questions, images, and security phrases to help ensure that each customer is recognized sufficiently negating the risk of identity theft.

Localized Security

Exchange Bank is very progressive in staying ahead of the game by keeping our local network secure to protect consumer data. We implement firewalls, anti-virus protection, intrusion prevention detection, access auditing, localized security policies and account auditing to ensure that our customer’s personal privileged information is safe.

Protecting Your User ID and Password:

When setting up or changing your password never use dates, names, or other easily guessed words as your password examples of passwords easy to guess are: password, mom, dad, bank, 123456, password123456, huskers, etc.

Don’t write your username and password down. This includes: a sticky note under the keyboard, a note under the desk, a note in your wallet.

Change your password as frequently as possible.

Don’t be tricked into giving out your username and password. EXCHANGE BANK will NEVER send you an e-mail asking for your User ID and Password.

Log-Off: When you are through viewing your account on-line always log-off before closing your browser. This can be done by clicking on the exit button on your browser or the logoff button.

E-Mail: Don’t use email to send anyone personal or confidential information.

“Phishing,” Spoofs, Hoaxes and other Deceptive E-Mails

Be careful when responding to e-mails that look like they are from us, a regulator or an auditor. Many thieves or hackers will send you an e-mail that will ask you to click on a link that takes you to a web site (or pop-up window) where you will be asked to “confirm,” “verify,” “update” or otherwise provide sensitive information (such as your account number, password, PIN, or social security number). Sometimes these e-mails will falsely say that your account will be shut down if you don’t act quickly. Don’t be intimidated by these threats. These links, web sites and pop-up windows may look like ours, but will really just take you to the thief (sometimes you can tell because there will be misspellings or transposition of letters in the link or web site address). Clicking on one of these links can expose your computer to viruses and spy-ware, even if you don’t supply the sensitive information they want. Exchange Bank will never send you an email that asks you to verify an account number, password, PIN or social security number. If you receive such a request, it is probably fraudulent. If you have any doubts about whether an email from us is authentic, don’t reply to it, open any attachment or use the link in the email. If at anytime you are not sure about the security or safety of an email or if you notice something out of the normal with our website please let Exchange Bank know immediately. Use the following link to contact Exchange Bank.

Don’t open spam or unsolicited e-mail messages. These often can contain harmful viruses or spy-ware.

Personal Computer Security

One of the most important things you can do as a consumer to protect your identity is to ensure that your Personal Computer has current anti-virus and anti-spyware installed. If you are not sure of the current status of your anti-virus or anti-spyware software please contact a support professional for assistance. Keeping current security software on your pc can help to protect against unwanted or malicious software packages.

If you are a victim of Identity Theft, follow these three steps:

1. Contact the fraud departments of each of the three major credit bureaus and report that your identity has been stolen. Ask that a “fraud alert” be placed on your file and that no new credit be granted without your approval.
Equifax
Toll-free phone number: 1-800-392-7816
Experian
Toll-free phone number: 1-800-682-7654
TransUnion
Toll-free phone number: 1-800-888-4213

2. For any accounts that have been fraudulently accessed or opened, contact the security departments of the appropriate creditors or financial institutions to close these accounts. To contact Exchange Bank, use the following link, Contact Us page.

3. File a report with your local police or the police where the identity theft took place. Get a copy of the report in case the bank or credit card company needs proof of the crime at a later date.

Protect Yourself

Up-to-Date and Active Anti-Virus and Anti-SpywareEnsure that all applicable Software and Operating System Security Updates have been applied.Take immediate action if you think your computer and/or personal information has been compromised.