Crystal Valley Financial Corporation dba First State Bank of Middlebury data breach
Crystal Valley Financial Corporation, operating as First State Bank of Middlebury, reported a data breach impacting personal information. The incident, dated October 2025, was reported to authorities in January 2026. An ongoing investigation seeks to understand the full scope, and affected individuals in Indiana should consider their options.
Docket sheet
- Company
- Crystal Valley Financial Corporation dba First State Bank of Middlebury
- Venue
- IN Attorney General
- Filed
- January 28, 2026
- People affected
- Not stated
- Status
- Investigation Open
Where this breach stands
- 1
Breach occurredOctober 30, 2025
Date of the incident as stated in the filing.
- 2
Reported to the IN Attorney GeneralJanuary 28, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Investigation Open. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Clerk's notes
Crystal Valley Financial Corporation, operating as First State Bank of Middlebury, has reported a data breach incident. The company filed notice regarding an event that occurred on October 30, 2025, with reporting to authorities on January 28, 2026. The full scope of the breach and the number of individuals affected remains under investigation.
While the specific nature of the breach and the types of personal information involved have not been detailed, individuals in Indiana who received a notification letter should be aware their data may have been exposed. The situation is currently under active investigation to determine the exact circumstances and impact.
If you received a notification letter from Crystal Valley Financial Corporation or First State Bank of Middlebury, it is prudent to remain vigilant. Review all account statements and credit reports for any unauthorized activity. Consider placing a fraud alert or credit freeze with credit bureaus as a precautionary measure.
Data breaches can lead to various risks, including identity theft and financial fraud. While Crystal Valley Financial Corporation states an investigation is ongoing, individuals whose personal information was compromised may have legal rights. It is advisable to understand these rights and potential next steps.
If you are an Indiana resident affected by this data breach, you may be eligible for a no-cost, no-obligation case review. This consultation can help you understand your situation and determine if pursuing legal action is appropriate for you.
If a notification letter about this breach reached you, see every IN data breach on file or browse all cases.
Other IN docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.