CCUL Grassroots Toolkit 2015
Total Page:16
File Type:pdf, Size:1020Kb
“Stop the Data Breaches” CCUL Grassroots Toolkit 2015 CCUL Grassroots Toolkit North Carolina CUNA, in partnership with state leagues, has launched a National Action Alert on Data Breach. Over the years, credit unions have been affected by data breaches at large merchants like Target, Home Depot and Michaels. The costs have been significant to credit unions, and members have been frustrated. Now with bills in Congress to address this issue, the Carolinas Credit Union League strongly urges your credit union to mobilize your employees (and your members if you so choose) to contact their members of Congress, asking them to support: The Data Security Act of 2015 S. 961, introduced by Senators Carper (D-DE) and Blunt (R-MO) H.R. 2205, introduced by Reps. Randy Neugebauer (R-TX) and John Carney (D-Del) These bills strengthen merchant standards to be comparable with those of credit unions, and they mandate a federal notification requirement for merchants when breaches occur. Additionally, each bill provides a floor for data security standards nationwide and includes the important provision to exclude financial institutions from these requirements as credit unions already are subject to rigorous standards under the GLBA (Gramm-Leach Bliley Act). Merchants need to improve their data security so credit unions can continue to serve their members. It’s time merchants are held to the same data protection standards. It’s time to stop the data breaches! Take action today using the resources provided in this toolkit. www.stopthedatabreaches.com 1 “Stop the Data Breaches” CCUL Grassroots Toolkit 2015 TABLE OF CONTENTS I. Grassroots Action Plan & Participation Schedule.......................................................Pg. 3 II. Email Templates...................................................................................................Pgs. 4-6 » Email Template #1: From CEO to CU Employees » Email Template #2: From CEO to CU Members III. Stop the Data Breaches Toolkit (provided by CUNA)...............................................Pg. 7 » Video » Overall Talking Points » Target Data Breach Survey Results » Home Depot Survey Results » Consumer Data Results on Fraudulent Card Use (PPT or PDF format) » Quick List of Risk Management Practices » Logos & Graphics » Promote to Your Members IV. Social Media Engagement..................................................................................Pgs. 8-9 » Sample Tweets » Congressional Social Media Pages www.stopthedatabreaches.com 2 “Stop the Data Breaches” CCUL Grassroots Toolkit 2015 GRASSROOTS ACTION PLAN & PARTICIPATION SCHEDULE The Carolinas Credit Union League has divvied up credit unions into groups in order to have a sustained outreach leading up to July’s Hike the Hill. During your week, we ask that you engage your credit union’s employees to send emails to their U.S. Senators and U.S. Representative using CUNA’s Action Center. The process takes only a few minutes and generates a form email to the member of Congress. We have provided templates for you to engage your employees in the pages that follow. With participation from just 75% of your employees, credit unions in North Carolina will have nearly 7,500 emails over the next ten weeks delivered to congressional offices. We need a constant drumbeat from North Carolina credit unions to help reinforce that the issue of data security is particularly important to us. If you want to accomplish more than your goal of 75% participation from your employees, we have provided additional tools including an email template that can be sent to your members, links to graphics for your credit union’s website and sample social media messaging. We thank you in advance for your support of the Data Breach Grassroots Campaign! PARTICIPATION SCHEDULE Group #1: May 11-15 Group #5: June 8-12 Weyco CUs with Fewer Than 10 Charlotte Fire Department WNC Community CU Employees Freedom Group #8: June 29-July 3 Group #2: May 18-22 Hanesbrands First Carolina People's First Legacy Summit Greensboro Municipal Latino Community Group #6: June 15-19 Premier Telco Community Carolina Cooperative Vision Financial Truliant Duke University Winston-Salem Group #3: May 25-29 Ecusta Group #9: July 6-10 Carolina Fort Bragg Electel Local Government HealthShare Piedmont Advantage Marine Lion's Share Riegelwood Mountain Group #7: June 22-26 RTP Group #4: June 1-5 Bragg Mutual Telco Allegacy Charlotte Metro Group #10 July 13-17 Carolina Postal Coastal Acclaim Carolinas Telco Greater Piedmont American Partners NC Community Southern Select Community Champion Welcome Members www.stopthedatabreaches.com 3 “Stop the Data Breaches” CCUL Grassroots Toolkit 2015 EMAIL TEMPLATE #1: FROM CEO TO CU EMPLOYEES I know that as credit union employees, you understand the impact of the data breaches at large retailers like Target, Home Depot and Michaels. These breaches have been costly to our credit union and frustrating for our members. I am writing to share that newly introduced bills in each chamber of Congress will hold merchants accountable when they are responsible for a breach of consumer data. We need our members of Congress to support the Data Security Act of 2015, S. 961, and the companion House bill, H.R. 2205. These bills strengthen merchant security standards to be comparable with those of credit unions and mandate a federal notification requirement for merchants when breaches occur. Additionally, each bill provides a floor for data security standards nationwide and also includes the important provision to exclude financial institutions from the requirements as they are already subject to rigorous standards under the Gramm-Leach Bliley Act (GLBA). INSERT YOUR CU NAME is working with the Carolinas Credit Union League and other credit unions in the state to make sure our members of Congress understand just how important this issue is to credit unions and our members. The League is initiating a ten-week grassroots campaign and INSERT YOUR CU NAME will participate this week in this statewide grassroots effort. Please take a moment through links below to send an email today to your members of Congress. The email addresses and a pre-written message are provided through the CUNA’s Grassroots Action Center, so the process is easy and will take a few minutes. Take action with members of the US House Take action with members of the US Senate The League will share reports of our progress toward our goal, which is just 75% participation from all employees. I would love to be able to show 100% participation from INSERT YOUR CU NAME employees! Thanks in advance for your participation in this important grassroots campaign! Don’t hesitate to ask me or your supervisor if you have any questions. Thank you, CU President/CEO ### www.stopthedatabreaches.com 4 “Stop the Data Breaches” CCUL Grassroots Toolkit 2015 EMAIL TEMPLATE #2: FROM CEO TO CU MEMBERS From: (Insert your credit union, CEO or CU member name) Subject: Credit union members are paying for merchant data breaches (Insert your credit union logo or header here. Header graphics should be between 600-700 pixels wide, usually 100-200 pixels high.) Members are paying for data breaches Dear Member: At (Your credit union’s name), we believe protecting the privacy and security of our members' accounts is our most important responsibility. When we discover a data breach at retailers like Target or Home Depot, we take action immediately to change account numbers and issue new credit and debit cards for members who were affected. In many cases, we can't even tell you which merchant caused the breach even though we are working to protect your account from the fraud. The possibility of having your personal financial data stolen is enough of a burden. You shouldn't have to worry about who will clean up the mess and pay the bills for the fraud. In 2014, there were over 750 data security breaches and over 85 million data records exposed. (Read more about the problem here). lf you're like most people, you probably assume that merchants take responsibility since their security failures caused the theft of your data. Unfortunately, that's not how it works. Credit unions like (Your credit union’s name) bear the brunt of these costs after a merchant data breach, even though we (and members like you) had nothing to do with it. Please view this short video that explains the issue in one minute: www.stopthedatabreaches.com 5 “Stop the Data Breaches” CCUL Grassroots Toolkit 2015 To give you one example, the Target breach left credit unions on the hook for $30.6 million, and credit unions reissued 4.6 million credit and debit cards. Because we are not-for-profit cooperatives owned by our members, you ultimately foot the bill. After you've been victimized by having your financial data stolen, you shouldn't have to pick up the tab to clean up the mess. Right now, merchants can shift most of their data breach costs to others. There is no incentive for them to spend the time and money to increase their data security. That's wrong for consumers and it's bad for our economy. That's why (Your credit union’s name) other credit unions across the country are working together to improve protections for consumers who are victims of merchant data breaches. We're calling on Congress to step up and protect credit union members by supporting the Data Security Act of 2015, S. 961, and the companion House bill, H.R. 2205. These bills are a good start to addressing this critical issue by: 1. Strengthening merchant standards to be comparable with those of credit unions; 2. Mandating a federal notification requirement for merchants when breaches occur; and 3. Providing a floor for data security standards nationwide. Overall, S. 961 and H.R. 2205 represent the best attempts so far at legislation to stop merchant data breaches. I hope you'll consider lending your voice to this important effort.