Jefferson Bank
Responsible Disclosure Program

At Jefferson Bank the security of customer information is our number one priority. It is our mission to continually monitor and review all of our security measures to ensure that every customer is protected. We are committed to maintaining top-level security and take each potential security vulnerability very seriously.

If you believe you have identified a potential security vulnerability please contact our Responsible Disclosure Team immediately and they will be able to assist you further.

Reporting a Security Vulnerability

If you believe you have identified a potential security vulnerability, please submit your findings to our Responsible Disclosure Team. Please be sure to include a detailed summary of the potential security vulnerability that you identified. You are encouraged to include the steps it took for you to discover the vulnerability, as well as any screen captures you may have taken. Jefferson Bank thanks you in advance for reporting potential security vulnerabilities. 

Responsible Disclosure Guidelines 

All security vulnerability reporters should submit potential finding in accordance to the following guidelines:

  1. Reporter does not engage in any activity that can potentially or actually cause harm to Jefferson Bank, Jefferson Bank Customers, or Jefferson Bank Employees.
  2. Reporter does not engage in any activity that can potentially or actually stop, delay, or degrade Jefferson Bank services or assets.
  3. Reporter does not engage in activity that violates
    1. federal or state laws or regulations or
    2. the laws or regulations of any country where
      1. data, assets, or systems reside,
      2. data traffic is routed or
      3. the researcher is conducting research activity.
  4. Reporter does not store, share, compromise, or destroy Jefferson Bank customer data.
  5. Reporter does not initiate in any fraudulent financial transactions.
  6. Reporter does not disclose the potentially identified security vulnerability with third parties.

Out of Scope Vulnerabilities

Certain potential security vulnerabilities are out of scope Jefferson Bank’s Responsible Disclosure Program. Those out of scope security vulnerabilities include, but are not limited to: 

  1. Physical testing
  2. Social engineering
  3. Phishing 
  4. Denial of service attacks 
  5. Resource Exhaustion Attacks 

Jefferson Bank thanks you in advance for your assistance in securing our customer information.