Indiana Code Title 28. Financial Institutions § 28-10-3-2

Sec. 2. Notwithstanding IC 24-4.9 or any other law, a corporation shall notify the director of the department of a reportable cyber incident or notification incident in accordance with the same procedures required by the corporation's federal supervisory authority or federal insurer.  A corporation without a federal supervisory authority or federal insurer shall notify the director of the department of the reportable cyber incident in accordance with the same procedures set forth in 12 CFR 748.1(c) for federally insured credit unions, regardless of whether the corporation is a federally insured credit union.