NOTICE OF DATA PRIVACY EVENT Kansas City, MO – Colonial Presbyterian Church. ("CPC") values and respects the privacy of its members' personal information, which is why we are writing to inform you of a data security incident that may have resulted in unauthorized access to some individuals' personal information. This notice is intended to provide details about the incident, steps we are taking in response, and resources available to help protect against the potential misuse of personal information. What Happened? On April 1, 2026, we detected suspicious activity within our computer network. Upon discovering the activity, we disconnected all access to the network and promptly engaged a specialized third-party cybersecurity firm to assist with securing the environment as well as to conduct a comprehensive forensic investigation to determine the nature and scope of the incident. The forensic investigation found evidence that CPC files were acquired by an unauthorized user. We diligently reviewed the potentially impacted files to identify and catalog the types of information present within them and any individuals to whom the information related. After completing its investigation, on August 18, 2026, we notified affected individuals by U.S. First Class Mail. We are providing this substitute notice to reach those individuals who were not able to receive direct notice of the incident. What Information Was Involved? Based on the investigation, it is possible the following information may have been subject to unauthorized access: name, address, financial account number and routing number. Please note the impacted data elements may vary for each individual. What Are We Doing? Data privacy and security are among our highest priorities, and we are committed to doing everything we can to protect the privacy and security of the personal information within our care. Since the discovery of the incident, we moved quickly to investigate, respond, and confirm the security of our computer systems. Specifically, we disconnected all access to our network, changed administrative credentials, restored operations in a safe and secure mode, enhanced the security measures, and took steps and will continue to take steps to mitigate the risk of future harm. Finally, we are providing affected individuals with complimentary credit monitoring and identity theft restoration services. What You Can Do: We encourage you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to monitor your credit reports for suspicious or unauthorized activity. Additionally, security experts suggest that you contact your financial institution and all major credit bureaus to inform them of such a breach and then take whatever steps are recommended to protect your interests, including the possible placement of a fraud alert on your credit file. More Information: Affected individuals should refer to the notice they will receive in the mail regarding steps they can take to protect themselves. In general, we recommend, as a precautionary measure, that individuals remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements and monitoring credit reports closely. If individuals detect any suspicious activity on an account, they should promptly notify the financial institution or company with which the account is maintained. They should also promptly report any fraudulent activity or suspected incidents of identity theft to proper law enforcement authorities, including the police and their state's attorney general and you have the right to file a police report and obtain a copy of your police report. You may also wish to review the tips provided by the FTC on fraud alerts, security/credit freezes and steps that you can take to avoid identity theft. You have a right to add, temporarily lift and remove a credit freeze, also known as a security freeze, on your credit report at no cost. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-Theft (1-877-438-4338). You may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, Washington DC 20580. Other Important Information: We recognize that you may have questions not addressed in this notice. If you have any questions or concerns, please call 1-844-326-2903 (toll free) Monday through Friday, during the hours of 9:00 a.m. and 9:00 p.m. Eastern Standard Time (excluding U.S. national holidays). CPC sincerely regrets any concern or inconvenience this matter may cause and remains dedicated to ensuring the privacy and security of all information in our control. Sincerely, Colonial Presbyterian Church IPL0370498 Sep 2 2026