On September 3, Highland became aware of an IT outage that affected certain systems. We immediately launched an investigation and determined the outage was the result of a cybersecurity attack, in which an unauthorized third party gained access to certain systems. As a result of this attack, Highland took steps to isolate the impacted environment and engaged a leading forensic security firm that specializes in data security incidents to support our investigation.
Our core banking systems, including balance information and systems responsible for transactions, were never affected. All of the non-core systems that were affected are now safely restored. Since the attack, Highland has also taken a number of additional steps to enhance security across our organization.
As part of our investigation, Highland has worked to identify whether any information was accessed by the unauthorized third party. We have since determined that certain personal information was involved, and Highland is mailing notice letters to individuals whose information was determined to be affected along with resources to help those individuals protect their information. If your information was determined to be involved in the attack, you will receive a letter in the mail in the coming days containing more information.
Once again, we apologize for any inconvenience this attack has caused, and thank you for your patience and understanding during this time.