First State Bank of Middlebury Reports Data Breach in Indiana
Crystal Valley Financial Corporation, operating as First State Bank of Middlebury, has filed a report regarding a data security incident. This breach, which occurred in late 2025, involved the exposure of personal information. Individuals who receive official notices from the bank should carefully review them for specific details and recommended actions.
- State
- IN
- Breach date
- October 30, 2025
- Reported
- January 28, 2026
Crystal Valley Financial Corporation, doing business as First State Bank of Middlebury, has publicly filed notice of a data breach. The filing indicates that an incident occurred where personal information may have been exposed.
The breach took place on October 30, 2025, as reported by the institution. The official filing regarding this event was submitted on January 28, 2026. The specific nature of how the breach occurred has not been detailed in the public record.
While the filing confirms that personal information was involved, the exact types of data exposed were not specified. Therefore, the information involved is generally referred to as 'personal information' or 'your data' based on the available public records.
As of the filing date, the incident remains under investigation. Crystal Valley Financial Corporation dba First State Bank of Middlebury is actively working to understand the full scope of the breach and its impact.
If you receive a notification letter from First State Bank of Middlebury, it is important to read it thoroughly for any instructions or specific details they provide. You should remain vigilant for any unusual activity across your personal accounts and consider reviewing your financial statements regularly.
It is always wise to be cautious about unsolicited communications, especially those asking for personal details. Verify the sender of any such requests directly with the organization through official contact methods, not through links or numbers provided in the suspicious communication. Regularly updating passwords for online accounts is also a general best practice for security.
Source: Attorney General filing