Customer Alert - Phishing Scam (11/13/07)

Companies nationwide are receiving complaints from consumers concerning email solicitations for private information, so-called "Phishing Scams". These emails can appear to be from legitimate companies, sometimes including company logos and website images. They request you to reply to the email or click on a link and verify your personal, account or login information. These links are directed to official looking, fake websites (spoofing) where your information is collected for fraudulent use.

It has come to our attention that a fraudulent "spoofed" website titled Winter Hill Bank has been created and, although no customers have yet to report receiving any phishing emails, the page is currently running an application page, contact us page and Internet Banking login page which may be used to capture private customer information.

While we work to have this fraudulent website shut down, you should follow these precautions to protect yourself from potential loss.

• Do not, under any circumstances, provide any information in response to an unsolicited email, the Bank will never ask you to provide information via email.
• The fraudulent site's web address (url) is different from the Bank's legitimate web address. Check to make sure you see http://www.winterhillbank.com/... in the address bar.
• If you receive a questionable email, please contact the Bank and forward the email to info@winterhillbank.com.
• If you have any concern that your account information has been compromised, contact the Bank and change your passwords immediately.

As long as you remain aware of your online surroundings, you should have no problem continuing to use the Bank's online services. If you have any questions or concerns please do not hesitate to contact us at 800-444-4300.