Archive Links

Consumer Archive
CU System Archive
Market Archive
Products Archive
Washington Archive

News Now

Washington
NEW: CUNA to Hill: CUs, members pay steep data breach price
WASHINGTON (3/5/14, UPDATED 11:11 a.m. ET)--The Credit Union National Association today made sure that every lawmaker on Capitol Hill got this message: America's credit unions spend millions of dollars--without skipping a beat--to protect consumers from merchant data breaches by re-issuing cards, monitoring accounts and reimbursing customers for fraud.

CUNA called on merchants to start working with financial institutions now to implement the best solutions to secure the system and protect consumers from fraud and identity theft--even though these solutions may be costly.

That message to Congress came in the form of a CUNA rebuttal to a recent blog post by the National Association of Convenience Stores (NACS) in The Hill newspaper.

In CUNA's Hill blog post today--which CUNA circulated to every federal lawmaker's office-- Executive Vice President of Government Affairs John Magill refutes mistaken claims NACS made about who covers costs of a merchant's data breach: it is credit unions and other financial institutions.

"Merchants are not required to reimburse financial institutions for the cost of card re-issuance after a data breach. Nothing in the Visa and MasterCard network rules provide for merchants to cover the costs of card re-issuance.

"This cost can be quite substantial, particularly for smaller financial institutions such as credit unions: the recent Target breach has cost credit unions about $5.68 per card affected, and that doesn't even include actual fraud losses," Magill states.

Magill goes onto to rebut the merchants' claim of "forced reimbursements" from merchants to card issuers to cover the cost of fraud losses after a breach--calling the whole notion "flawed."

"The Durbin amendment only applies to debit transactions, not credit, and the rate adjustment does not cover the cost of card re-issuance."

Even when merchants are made to take responsibility--like in a recent settlement reached between TJ Maxx, Visa and  MasterCard after a recent data breach at the retailer-- the credit unions involved received only pennies on the dollar to cover fraud costs. (Magill also notes that if network rules really did provide for "forced reimbursements," then there would be no need for this type of settlement in the first place.)

Calling on merchants to work with credit unins and other financial institutions for solutions, Magill concludes, "While we have all had our disagreements about issues in the past, now is the time to put our customers first and collaborate to ensure the best outcome for Americans." 


RSS





print
News Now LiveWire
Matz: Revised @TheNCUA #RBC rule for #creditunions 2 B unveiled 1/15/15, 90-day comment period to follow #newsnow http://t.co/qABhvghSTU
1 Day ago
Just announced: @TheNCUA board will consider a revised risk-based capital rule at its Jan 15 mtg. See #NewsNow Monday for more info.
1 Day ago
Nearing one-yr anniversary of data breach, @Target asks for class action suits to be dismissed via @BloombergNews http://t.co/kra6kupd35
1 Day ago
.@PeoplesTrustFCU has been recognized with the Juntos Avanzamos designation by @Cornerstone_CUL for its service to the Hispanic community
1 Day ago
#NewsNow: Rep. Hensarling names #HFSC subcommittee chairs. http://t.co/dXAMZdpn1p
1 Day ago