Cyber and Technology Risk Management Forum, Park City, UT

High Risk Task Force

• Community bank CEOs identified four threats of concern • Developed mitigation practices to share

• Orrstown Bank, Shippensburg, Penn. • Berkshire Bank, Pittsfield, Mass. • PeoplesBank, Holyoke, Mass. • First Savings Bank, Clarksville, Ind. • Bank of Oak Ridge, Oak Ridge, N.C. • Texas Bank & Trust, Longview, Texas • Happy State Bank, Happy, Texas • First Northern Bank, Dixon, Calif.

• Bank of Utah, Ogden, Utah • Mainstreet Bank, Cook, Neb. • RCB Bank, Claremore, Okla. • Lewis & Clark Bank, Oregon City, Ore. • Farmers Bank & Trust Company, Magnolia, Ark. • Community Bancshares of Mississippi, Brandon, Miss. • The Commercial and Savings Bank of Millersburg, Ohio

Large Funds-Transfer

(SWIFT Like) Thefts

• $81 million - Bangladesh central bank - Feb 2016 – Community banks don’t use SWIFT, but… • SWIFT like thefts thru non-SWIFT networks – FedWire, CHIPS, and regional correspondents can become targets. • FBI Fraud Alert - Sept 2012 – Thefts were basically CATOs. ( o ) to the attackers in order to decrypt and recover their files.