Crystal Valley Financial Reports Data Incident Affecting Customers

Crystal Valley Financial Corporation, which operates as First State Bank of Middlebury, submitted a data breach notification to the Indiana Attorney General's office. This public filing confirms a data security incident that the company has acknowledged.

The breach event itself reportedly took place on October 30, 2025, with the official report filed on January 28, 2026. The specific type of breach was not detailed in the filing, nor were the exact categories of personal information exposed. The total number of individuals impacted by this event also remains unspecified in the public record.

First State Bank of Middlebury has indicated it is currently investigating the incident. If you received a data breach notification letter directly from Crystal Valley Financial Corporation or First State Bank of Middlebury, it signifies that your personal information was involved.

It is important to thoroughly read any notification letter you receive, as it should contain information relevant to your specific situation. This letter is the primary source for understanding what information may have been exposed and any specific protective actions recommended by the bank.

As a general precaution, consider monitoring your financial accounts and statements for any unusual activity. Remaining vigilant about unsolicited communications, such as suspicious emails or phone calls, is also a recommended step. These details are derived from official public records filed with state regulators.