Security & Privacy

Privacy Policy

Since 1920, Hearthside Bank has gone the extra mile to protect our customers' privacy. One cornerstone of our corporate belief is the importance and value of your trust. Our management and employees work and plan every day to earn, safeguard and keep that trust. No matter how you do business with Hearthside Bank one thing is the same: YOUR PRIVACY IS OUR TOP PRIORITY!

Your relationship with us means you provide Hearthside Bank with important personal information about you and your family. We have always been careful to safeguard the privacy of that information. Our Privacy Statement spells out an important fact. We do not disclose any information about you to anyone except for companies we work with to provide services to you; such as the Credit Bureau. We have never sold your name and address to another organization for any purpose nor do we ever intend to do so.

We value our customers and will continue to safeguard the confidentiality, security and integrity of all your private information.

Privacy Policy

Mobile App Privacy Information

Security Updates for Browsers & Operating Systems

At Hearthside Bank, your online safety is of the utmost importance. We encourage you to be sure your web browsers (such as Internet Explorer, Safari, Firefox, Chrome) and operating systems (i.e. Windows, Android, iOS) are up to date. Old versions that are no longer supported by the provider stop receiving critical security updates. Please check your web browsers and operating systems on your computers and mobile devices regularly and install updates whenever possible.

Test your web browser

What is Identity Theft?

If you think you have been a victim of identity theft and not sure what steps to take?

How can someone steal your identity?

Identity theft occurs when someone uses your personal information such as your name, Social Security Number, credit card number or other identifying information, without your permission to commit fraud or other crimes.

Identity theft is a serious crime. People whose identities have been stolen can spend months or years - and their hard-earned money - cleaning up the mess thieves have made of their good name and credit record. In the meantime, victims may lose job opportunities, be refused loans, education, housing or cars, or even get arrested for crimes they didn't commit.

How do they go about stealing my identity?

Identity thieves may use a variety of low- and high-tech methods to gain access to your personally identifying information.

They get confidential information by:

• stealing records from their employer
• bribing an employee who has access to the records
• conning information out of employees
• hacking into the organization's computers
• rummage through your trash, the trash of businesses, or dumps in a practice known as "dumpster diving"
• obtain credit reports by abusing their employer's authorized access to credit reports or by posing as a landlord, employer or someone else who may have a legitimate need for and a legal right to the information
• steal credit and debit card account numbers as your card is processed by using a special information storage device in a practice known as "skimming"
• steal wallets and purses containing identification and credit and bank cards
• steal mail, including bank and credit card statements, pre-approved credit offers, new checks, or tax information
• complete a "change of address form" to divert mail to another location
• steal personal information from your home
• scam information from you by posing as a legitimate business person or government official

How can I tell if I'm a victim of identity theft?

Monitor the balances of your financial accounts. Look for unexplained charges or withdrawals.

Other indications of identity theft include:

• failing to receive bills or other mail, which may signal an address change by the identity thief
• receiving credit cards for which you did not apply
• being denied credit for no apparent reason
• receiving calls or letters from debt collectors or businesses about merchandise or services you did not buy

Although any of these indications could be a result of a simple error, you should not assume that there's been a mistake and do nothing. Always follow up with the business or institution to find out.

What can I do to protect myself?

As with any crime, you can't guarantee that you will never be a victim, but you can minimize your risk. By managing your personal information widely, cautiously and with an awareness of the issue, you can help guard against identity theft.

• Don't give out personal information on the phone, through the mail or over the Internet unless you've initiated the contact or are sure you know who you're dealing with. Identity thieves may pose as representatives of banks, Internet service providers (ISPs) and even government agencies to get you to reveal your SSN, mother's maiden name, account numbers, and other identifying information. Before you share any personal information, confirm that you are dealing with a legitimate organization. You can check the organization's Web site as many companies post scam alerts when their name is used improperly, or you can call customer service using the number listed on your account statement or in the telephone book.
• Don't carry your SSN card; leave it in a secure place.
• Secure personal information in your home, especially if you have roommates, employ outside help or are having service work done in your home.
• Guard your mail and trash from theft:
  • Deposit outgoing mail in post office collection boxes or at your local post office, rather than in an unsecured mailbox. Promptly remove mail from your mailbox. If you're planning to be away from home and can't pick up your mail, call the U.S. Postal Service at 800-275-8777 to request a vacation hold. The Postal Service will hold your mail at your local post office until you can pick it up or are home to receive it.
  • To prevent an identity thief who may pick through your trash or recycling bins to capture your personal information, tear or shred your charge receipts, copies of credit applications, insurance forms, physician statements, checks and bank statements, expired charge cards that you're discarding, and credit offers you get in the mail. If you do not use the pre-screened credit card offers you receive in the mail, you can opt out by calling 888-5-OPTOUT (888-567- 8688). Please note that you will be asked for your Social Security Number in order for the credit bureaus to identify your file so that they can remove you from their lists and you still may receive some credit offers because some companies use different lists from the credit bureaus' lists. For more information, see how can I prevent companies from using my personal information for marketing?
• Carry only the identification information and the number of credit and debit cards that you'll actually need.
• Place passwords on your credit card, bank and phone accounts. Avoid using easily available information like your mother's maiden name, your birth date, the last four digits of your SSN or your phone number, or a series of consecutive numbers. When opening new accounts, you may find that many businesses still have a line on their applications for your mother's maiden name. Use a password instead.
• Ask about information security procedures in your workplace or at businesses, doctor's offices or other institutions that collect personally identifying information from you. Find out who has access to your personal information and verify that it is handled securely. Ask about the disposal procedures for those records as well. Find out if your information will be shared with anyone else. If so, ask if you can keep your information confidential.
• Give your SSN only when absolutely necessary. Ask to use other types of identifiers when possible. If your state uses your SSN as your driver's license number, ask to substitute another number. Do the same if your health insurance company uses your SSN as your account number.
• Pay attention to your billing cycles. Follow up with creditors if your bills don't arrive on time. A missing bill could mean an identity thief has taken over your account and changed your billing address to cover his tracks.
• Be wary of promotional scams. Identity thieves may use phony offers to get you to give them your personal information.
• Keep your purse or wallet in a safe place at work as well as any copies you may keep of administrative forms that contain your sensitive personal information.
• Cancel all unused credit accounts.
• When ordering new checks, pick them up at the bank, rather than having them sent to your home mailbox.

Information on Credit Bureaus

If an identity thief is opening new credit accounts in your name, these accounts are likely to show up on your credit report. You can find out by ordering a copy of your credit report from any of three major credit bureaus. Check your report carefully to make sure it is accurate. See what should I look for on a credit report to indicate identity theft? If you do find any inaccurate information, you should check your reports from the other two credit bureaus. Note: If your personal information has been lost or stolen, you should check all of your reports more frequently for the first year.

To report fraudulent tax filings/tax refunds click the link below for the IRS website and follow the instructions:

Report fraudulent tax filings/tax refunds to the IRS

Fraud Alerts

Hearthside Bank is concerned about your financial security and we want to help keep you safe from possible fraud attempts. Fraud Schemes can come in many different forms and variations but they all share one common goal, to steal your money and/or your identity. Below we have posted a couple of the most frequent and recent fraud schemes. These are examples of fraud that you may encounter but, there are many others.

Unemployment Insurance Fraud

There are two common ways individuals become aware they are a victim of unemployment insurance fraud. First, when an employer or previous employer notifies an individual that an unemployment insurance claim was filed in their name. Second, when an individual receives a 1099-G IRS Tax Form from the state where an unemployment insurance claim was made despite not filing for unemployment insurance during that calendar year.

If you are a victim of unemployment insurance fraud, you can file a report with the Kentucky Labor Cabinet for Kentucky residents, or visit the Tennessee Department of Labor and Workforce Development for Tennessee residents.

More information can be found at the Kentucky Career Center, the FTC’s IdentityTheft.gov, or the IRS.

Sweepstake or Prize Winning Payout

When you receive notice in the mail that you are one of the big winners of a "Consumers Promotional Drawing" organized for customers of Wal-Mart, Sears, Kohl's, Walgreens or other major retail stores.

Here are some of the warning signs of Prize or Sweepstake fraud:

• Notification by mail that you have won a large sum of money
• You receive a check for the payment of "taxes" on your winnings
• You are instructed to deposit the check and send them a portion of the money for taxes
• You are advised not to act on this letter until you speak to your "Claims Agent"

If you receive one of these notices in the mail please do not respond. Don't deposit the check into your account and don't send them any money. The checks are fraudulent.

Telemarketing Fraud

When you send money to people you do not know personally or give personal or financial information to unknown callers, you increase your chances of becoming a victim of telemarketing fraud.

Here are some warning signs of telemarketing fraud-what a caller may tell you:

• "You must act 'now' or the offer won't be good."
• "You've won a 'free' gift, vacation, or prize." But you have to pay for "postage and handling" or other charges
• "You must send money, give a credit card or bank account number, or have a check picked up by courier."

If you hear these or similar "lines" from a telephone salesperson, we recommend that you say, "No thank you" and hang up the telephone.

If you feel you may have been a victim of fraud, please contact us immediately.

Phishing

**False Email Alert

Hearthside Bank is always going the extra mile to protect your privacy. With this in mind, we do not send emails asking for account information, personal information or passwords. If you receive an email that asks for any of the information mentioned above or prompts you to visit another site please disregard this email and contact us directly.

What is "Phishing"?

Internet scammers casting about for people's financial information have a new way to lure unsuspecting victims: They go "phishing."

Phishing is a high-tech scam that uses spam or pop-up messages to deceive you into disclosing your credit card numbers, bank account information, Social Security Number, passwords or other sensitive information.

How do I identify a Phishing attempt?

According to the Federal Trade Commission (FTC), phishers send an email or pop-up message that claims to be from a business or organization that you deal with - for example, your Internet service provider (ISP), bank, online payment service, or even a government agency. The message usually says that you need to "update" or "validate" your account information. It might threaten some dire consequence if you don't respond. The message directs you to a Web site that looks just like a legitimate organization's site, but it isn't. What's the purpose of the phony site? To trick you into divulging your personal information so the operators can steal your identity and run up bills or commit a crime in your name.

How can I protect myself from Phishing?

The FTC, the nation's consumer protection agency, suggests these tips to help you avoid getting hooked by a phishing scam:

• If you get an email or pop-up message that asks for personal or financial information, do not reply or click on the link in the message. Legitimate companies don't ask for this information via email. If you are concerned about your account, contact the organization in the email using a telephone number you know to be genuine, or open a new Internet browser session and type in the company's correct Web address. In any case, don't cut and paste the link in the message.
• Don't email personal or financial information. Email is not a secure method of transmitting personal information. If you initiate a transaction and want to provide your personal or financial information through an organization's Web site, look for indicators that the site is secure, like a lock icon on the browser's status bar or a URL for a website that begins "https:" (the "s" stands for "secure"). Unfortunately, no indicator is foolproof; some phishers have forged security icons.
• Review credit card and bank account statements as soon as you receive them to determine whether there are any unauthorized charges. If your statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances.
• Use anti-virus software and keep it up to date. Some phishing emails contain software that can harm your computer or track your activities on the Internet without your knowledge. Anti-virus software and a firewall can protect you from inadvertently accepting such unwanted files. Anti-virus software scans incoming communications for troublesome files. Look for anti-virus software that recognizes current viruses as well as older ones; that can effectively reverse the damage; and that updates automatically.
• A firewall helps make you invisible on the Internet and blocks all communications from unauthorized sources. It's especially important to run a firewall if you have a broadband connection. Finally, your operating system (like Windows or Linux) may offer free software "patches" to close holes in the system that hackers or phishers could exploit.
• Be cautious about opening any attachment or downloading any files from emails you receive, regardless of who sent them.
• Report suspicious activity to the FTC. If you get spam that is phishing for information, forward it to spam@uce.gov. If you believe you've been scammed, file your complaint at www.ftc.gov, and then visit the FTC's Identity Theft Web site at www.consumer.gov/idtheft to learn how to minimize your risk of damage from ID theft. Visit www.ftc.gov/spam to learn other ways to avoid email scams and deal with deceptive spam.

Where can I get more information on phishing?

The FTC works for the consumer to prevent fraudulent, deceptive and unfair business practices in the marketplace and to provide information to help consumers spot, stop, and avoid them. To file a complaint or get free information on consumer issues visit www.ftc.gov or call toll-free, 877-FTC-HELP (877-382-4357); TTY: 866-653-4261.