A couple of months ago, I had to file a SAR on some forgeries that were done here at our bank that took place in June, 2003. Today, I learned that these same individuals had forged some items on another account in May, 2002. Should I do an updated SAR and include the findings from today in it? I guess it is the different dates that has me confused, with it being over a year since the first one occurred and we just found it, as opposed to the one that happened in the last few months.

By all means, update the existing SAR record and resubmit. Help FinCEN tie these events together in the one record. It also looks better at your end.