Crystal Valley Financial Corporation dba First State Bank of Middlebury data breach
Crystal Valley Financial Corporation, operating as First State Bank of Middlebury, confirmed a data security incident that occurred in October 2025, which led to the exposure of personal information. If you received a notification letter, your data was involved, and you should consider your next steps to protect yourself.
Docket sheet
- Company
- Crystal Valley Financial Corporation dba First State Bank of Middlebury
- Venue
- Indiana Attorney General
- Filed
- January 28, 2026
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredOctober 30, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralJanuary 28, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
Crystal Valley Financial Corporation, doing business as First State Bank of Middlebury, recently reported a data breach to the Indiana Attorney General. The financial institution, which provides banking and wealth management services, experienced an incident on October 30, 2025. The company officially filed notice of this security event on January 28, 2026.
The specific nature of the breach and the exact types of personal information exposed have not been detailed. However, if you received a data breach notification letter from Crystal Valley Financial Corporation or First State Bank of Middlebury, it signifies that your data was indeed compromised in this incident.
It is crucial to review your notification letter carefully, as it should contain specific guidance regarding the information involved and any steps the bank recommends you take. As a general precaution, consider closely monitoring your financial accounts and credit reports for any suspicious activity. Many institutions offer complimentary credit monitoring services following a breach; take advantage of these if available.
While Crystal Valley Financial Corporation has reported that the incident is currently under investigation, individuals whose data was exposed may have questions about their rights and potential remedies. It is important to understand the full scope of what happened and how it might impact you.
For those affected by the Crystal Valley Financial Corporation dba First State Bank of Middlebury data breach, you may be eligible for a free case review. This consultation can help you understand the facts of the breach and explore any legal options available to you.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.