2022-06-29 NEW PEOPLES BANKSHARES INC Cybersecurity Incident

Page last updated on September 24, 2025

NEW PEOPLES BANKSHARES INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2022-06-29 16:13:19 EDT.

Incident Details

Material: Unknown
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: Other, Bank account number, Driver License Number, Social Security Number

Compromised Date: 2022-06-09
Detected Date: 2022-06-15
Disclosure Date: 2022-06-29
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Theft
Attack Tactics¹: TA0001, TA0005
Attack Techniques¹: OTHER

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2022-06-29

NEW PEOPLES BANKSHARES INC filed an 8-K at 2022-06-29 16:13:19 EDT
Accession Number: 0001903596-22-000408

Item 8.01 Other Events.

On June 29, 2022, New Peoples Bank (the "Bank"), the wholly-owned subsidiary of New Peoples Bankshares, Inc., issued a press release announcing that the Bank recently experienced a cybersecurity incident. A copy of the press release is attached to this report as Exhibit 99.1 and is incorporated herein by reference.

Exhibit No. 99.1

Press release dated June 29, 2022.

Media contact: newpeoplesbank@fticonsulting.com

New Peoples Bank Notifies Customers of Cybersecurity Incident

June 29, 2022 Honaker, VA:

New Peoples Bank ("NPB"), the wholly owned subsidiary of New Peoples Bankshares, Inc. (OTCBB: NWPP), announces that it recently experienced a cybersecurity incident that temporarily interrupted the operability of its computer systems. Since learning of the incident, NPB worked around-the-clock to quickly and safely restore its systems from backups and resume normal operations. As of the date of release, NPB systems have been restored and banking operations have resumed. All transactions from June 15 forward have been processed.

Since learning of the incident on June 15, 2022, NPB has been conducting an investigation into the nature and scope. A third-party cybersecurity firm was engaged to assist in the investigation, and law enforcement and regulators were notified. The investigation revealed that an unauthorized person gained access to NPB systems. Through its investigation, NPB determined that some personal information of its customers, shareholders, and employees may have been subject to unauthorized access as a result of this incident. Specifically, the investigation determined that the unauthorized person gained access to NPB systems on June 9, 2022. Although NPB had protocols and security technology in place to help prevent this access, the unauthorized person was able to evade many of these defenses. NPB determined that some customer information may have been accessed or acquired by the unauthorized person, including Social Security numbers, driver's license numbers, financial account information, and/or electronic signatures.

NPB is approaching this situation with the utmost seriousness and understands the concern this incident may cause its customers. As a result, customers will be offered a complimentary one-year membership with Experian's(R) IdentityWorksSM. This product helps detect possible misuse of personal information and provides identity protection support. For more information on IdentityWorksSM, including instructions on how to activate the complimentary one-year membership, as well as some additional steps individuals may consider taking to protect their personal information, please visit NPB's website - https://www.newpeoples.bank/ - and look for the link to "Cybersecurity Incident."

NPB encourages everyone to remain vigilant by reviewing their account statements and credit reports for any unauthorized activity. If individuals see charges or activity they did not authorize, please contact the relevant financial institution or the credit bureau reporting the activity immediately.

NPB has established a dedicated call center to help answer any questions customers may have about the incident or how to sign up for these services. Please call 855-516-3784, Monday through Friday, between 9:00 a.m. and 6:30 p.m. Eastern Time (excluding major U.S. holidays) for more information.

NPB sincerely regrets any inconvenience or concern this incident may have caused, and looks forward to continuing to serve its customers and communities. Safeguarding the information entrusted to it is a responsibility NPB takes seriously. The bank is working towards enhancing its existing security protocols and safeguards even further to help prevent unauthorized access to its systems in the future.

About New Peoples Bankshares, Inc. New Peoples Bankshares, Inc. is a one-bank financial holding company headquartered in Honaker, Virginia. Its wholly-owned subsidiary provides banking products and services through its 20 locations throughout southwest Virginia, eastern Tennessee, western North Carolina, and southern West Virginia. The Company's common stock is traded over the counter under the trading symbol "NWPP". Additional investor information can be found on the Company's website at https://newpeoples.bank/Bankshares-About-Us.

Company Information