This website will be inaccessible on Sunday, 9/11/2022, 6am—10am during a scheduled server maintenance.

Handling a Data Breach

Directive Statement

In the event of a breach or suspected breach of security – including the suspicion that credit or debit card information has been exposed, stolen, or misused – the merchant or UF department must immediately contact Merchant Services (392-9057) and the UF Privacy Office Hotline (1-866-876-4472).  The department must immediately contain and limit the data exposure and minimize data loss by ceasing use of any suspect machine.

Reason for Directive

Security breaches can result in serious consequences for the University including damage to the institution’s reputation, added compliance costs, the assessment of substantial fines, the loss of credit card acceptance privileges and possible legal liabilities.

Who Must Comply?

All University departments whose personnel store, process or transmit cardholder information. This also applies to units that outsource the processing of payment card information to third party vendors.

Procedure & Best Practice