Security Matters

Berkshire Bank understands that security measures are of utmost importance on the Internet. Security on the Internet begins with your browser. You must use a browser that supports the Secure Sockets Layer (SSL) encryption if you wish to take full advantage of the site. SSL allows you to securely send and receive encrypted data over the Internet. This protocol provides a secure channel for data transmission through its public/private key encryption capabilities. When you visit pages requesting sensitive personal information, we will encrypt the data in an effort to prevent unauthorized parties from accessing it in transit. (Look for the padlock icon on your browser.)

The following files require SSL (https://) connection when accessed.

• Checkorder.asp (a.k.a. Check Order)
• Login (a.k.a. Personal & Small Business Login)
• Login (a.k.a. Business Solutions)
• Home Equity (a.k.a. Online Home Equity Application)
• Personal and Vehicle (a.k.a. Online Personal and Vehicle Loan Application)
• Berkshire Bank Home Lending
• Other areas of the site may be accessed using SSL though do not require it.

Personal information shared over the Internet can be used to commit fraud. A website can be created using a name similar to that of a reputable business, for instance by using a misspelling of the company's name. The intent is to lure you into clicking onto the copy cat website and providing personal information. Be sure you know whom you are dealing with over the Internet and understand what will be done with your information.

Don't get hooked by a "Phishing" scam.

Internet scammers casting about for people's financial information have a new way to lure unsuspecting victims: They go "phishing."

"Phishing" is a high-tech scam to deceive consumers into disclosing their credit card numbers, bank account information, social security numbers, passwords and other sensitive information. Be sure to avoid clicking on suspicious links and / or attachments.

You should never provide your personal information in response to an unsolicited telephone call, fax, letter, email or Internet advertisement.

Never respond to an unsolicited email that asks for detailed financial information. Berkshire Bank would never request this information in an email.

Report anything suspicious to the proper authorities. Alert the company or Government agency identified in the suspect email through a web address or telephone number that you know is legitimate.

If you think you have received a phishing email or have been directed to a "phishing looking" website, you can also contact the Internet Crime Complaint Center a partnership between the FBI and the National White Collar Crime Center.

Immediately contact Berkshire Bank

Contact the three major credit bureaus and request that a fraud alert be placed on your credit report. The credit bureaus and phone numbers are:

Equifax 1-800-525-6285 | Experian 1-888-397-3742 | Trans Union 1-800-680-7289

File a complaint with the Federal Trade Commission by calling 1-877-382-4357.

Don't get hooked by fraudulent phishing attempts!!

At Berkshire Bank, we value the safety and privacy of your personal information. In doing so, we wanted to remind you of our policies regarding non-public, personal information.

When you call us, come to a branch or visit us online, we will ask for some information to verify your identity. But we want to assure you that we will never call you or send you an email asking you to send us a response containing personal or private information.

In the past several months, several "scams" have been centered around phone calls or emails asking a customer to reveal account numbers, ATM or Debit Card numbers, passwords or other personal, private, non-public information. In some cases, scammers are sending fraudulent emails claiming to be from certain bank or banking agencies and then ask customers to visit a fraudulent website identical to the bank or banking agency's authentic website in order to have customers provide their personal information.

We want to remind you never to disclose ANY personally identifying information if requested via an unsolicited email or phone call. Berkshire Bank will never request this information from you online, through our website or on the telephone. This includes:

• Berkshire Bank account numbers or credit card numbers
• Personal Identification Numbers (PIN) or passwords
• Social Security Number
• Mother's Maiden Name
• Other private information

Additionally, if you use BerkshireBank@Home or BerkshireBank@Work Online banking, log out when finished and close your browser before leaving your computer. Never leave your computer unattended during a Berkshire Bank Internet banking session.

If you ever get an unsolicited phone call or email claiming to be from Berkshire Bank asking you for personal identifying or account information, please do not respond. Call us at 833.BERKBNK to let us know and to be sure you are communicating with Berkshire Bank. Also, be wary of any email asking you to log into Berkshire Bank Internet banking applications if it does not link to the official Berkshire Bank site located at http://www.berkshirebank.com/.

For more information about Phishing, contact your nearest Berkshire Bank office.

Screen scraping or information aggregating involves the extraction of customer information from websites of banks and other companies in order to consolidate and reformat this information. In order to accomplish this, information aggregators obtain a person's identification code and/or password to accounts and consent to access that information.

If you choose to use an information aggregator, you should carefully read and understand their Terms and Conditions prior to releasing your password information. You may compromise the security of your accounts if you give away your password information to a third party because we may not be able to verify the user of the password information.