Security Alerts

We take the security of your account very seriously and have deployed several different strategies to protect your account.  Herring Bank will never call and ask you for any account information.  If you receive a call asking for details about your account do not provide any information.  Hang-up and call us at 866-348-3435 and speak to a representative.

FDIC Consumer Cybersecurity

March 9, 2016

The FDIC has released a guide for all banking customers regarding cybersecurity with helpful advice for staying safe online.  You can read more about it at the following link.

FDIC Cybersecurity Guide


January 15, 2014

Victims of the Target data breach are vulnerable to phishing attacks right now. Remember, we will never ask you for personal information or your account number in an email; do not respond to emails that warn of dire consequences; check your accounts regularly; look for the padlock key when submitting sensitive info over the internet. File complaints with the Internet Crime Complaint Center:


December 19, 2013

Herring Bank has been informed by MasterCard that some Herring Bank debit cards may have been compromised as a result of the recent Target Corp. data breach reported in the news. All compromised debit cards have been put in INACTIVE status, and must be replaced. A replacement debit card has been ordered for compromised embossed debit cards. Also, you may visit your local Herring Bank branch to receive a temporary replacement debit card. Please contact the Herring Bank Call Center at 866-348-3435 for any questions you may have.

Herring Bank takes the security of your debit card and account very seriously, and will do all we can to protect your account.

Target’s Press Release: Target Press Release

OpenSSL Heartbleed Bug

April 14, 2014

On April 7, 2014, security researchers disclosed a flaw in certain versions of OpenSSL software that is used by some websites to encrypt communication between a web browser and a server. This flaw has been named the Heartbleed bug and has been widely publicized.

In response to this vulnerability, we have taken the following actions:
– Verified that all webservers used by Herring Bank are not susceptible to this bug. Our servers do NOT use the versions of OpenSSL that are vulnerable to Heartbleed.
– Verified with vendors providing services to Herring Bank and our customers that they have no indication that Heartbleed has been used against their systems and that they have taken steps to ensure that they are not vulnerable to this exploit.
Security experts recommend the following actions to all internet users:
– Contact online services that you use and verify that they are either not affected by Heartbleed or that they have taken steps to address the vulnerability.
– Change all of your passwords for those online services. When changing your password choose secure passwords and use different passwords for each website.
– Monitor your accounts for suspicious activity
If you have any questions please contact the Customer Contact Center at 866-348-3435.

We help protect your account by using:

  • Industry standard encryption
  • Multi-factor authentication
  • Timed logoff of your Internet Banking account
  • Fraud scanning

You can help protect yourself online by:

  • Using unique usernames and passwords on all your internet sites
  • Using a strong password
  • Stay-up-to-date on your software patches and antivirus software
  • Never give out account details unless you are sure of the website

You can protect yourself from fraudsters and scammers by:

  • Always protect your credit/debit cards.
  • Only use trusted ATM’s or get money back from retailers.
  • Never give out account information over the phone unless you personally initiated the call.
  • If someone asks for your account details over the phone, ask them for a callback number and call them back or go to the company’s website and find a phone number to call.