STATE BANCORP, INC.

Clear Mountain Bank notified the New Hampshire Attorney General of a security incident involving unauthorized access to an employee's email account. The breach occurred between December 6-7, 2020, and was discovered on December 7, 2020. The investigation concluded that one New Hampshire resident's name and Social Security number were potentially accessed. The bank engaged a cybersecurity firm, reset passwords, disabled Outlook Web Access, and offered one year of identity monitoring services to the affected individual. Notification was sent to the state on May 4, 2021.

Clear Mountain Bank reported a business email compromise incident occurring between December 7 and 16, 2020, discovered on March 5, 2021. The breach affected 5,114 individuals, including one Maine resident. The attacker gained access to email accounts and exfiltrated names and Social Security Numbers. The bank notified affected individuals in writing on May 4, 2021, and provided one year of credit monitoring and identity theft protection services through Kroll.

Clear Mountain Bank reported a data breach to the Indiana Attorney General. The breach occurred on 2020-12-06 and was reported on 2021-05-04. 2 Indiana residents were affected. 5,114 individuals affected in total.

Clear Mountain Bank reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-05-04. 4 Massachusetts residents were affected. The report records the breach type as electronic.