Cybersecurity Incident Reporting Guidelines

At I&M Bank we value the trust and confidence our customers place in us to protect their sensitive information and digital assets. In the event of a cybersecurity incident, your prompt reporting is essential to help us address and mitigate any potential threats. This guide outlines the procedures for reporting cybersecurity incidents and provides important information on how you can assist in our response efforts.
Types of Cybersecurity Incidents:
- Unauthorized Access: Any attempt to gain unauthorized access to your account, personal information, or digital assets.
- Phishing Attempts: Suspicious emails, messages, or websites designed to deceive you into disclosing sensitive information such as username, passwords or financial details.
- Data Breaches: Any indication that your personal or financial information may have been compromised, including unauthorized access or disclosure.
Reporting Procedures:
- Immediate Response: If you suspect a cybersecurity incident, take immediate action to protect yourself and your data. This may include changing your online banking passwords, freezing your account or enabling OTP/TPIN.
- Report to I&M Bank: Contact our customer support team by calling 0719 088 000,0732 100 000 or sending an email to customercare@imbank.co.ke to report the incident. Provide as much detail as possible, including the nature of the incident, any messages or emails received, and any actions you have taken in response.
- Preserve Evidence: Preserve any evidence related to the incident, such as screenshots of suspicious emails or messages, error messages from your device, or unusual activity.
- Follow Instructions: Follow any instructions provided by our customer support team to assist in the investigation and resolution of the incident, as well as the protection of your account.
- Stay Informed: Keep yourself informed about the incident and any updates or actions being taken by the Bank to address it. We will strive to keep you informed of the situation and any steps you may need to take to protect yourself.