While it’s not uncommon to hear about security breaches from large corporations such as Chick-fil-A, Chipotle and Pizza Hut, data breaches can happen to restaurant chains and small eateries alike. Nearly half of cyber attacks target small businesses, and 60% of small companies go out of business after experiencing a significant attack.
The annual Data Privacy Day on Jan. 28 and Data Privacy Week on Jan. 21-27 this year (with 2022 marking the first occurrence) is a national effort by the National Cybersecurity Alliance to empower individuals and businesses to respect privacy, safeguard data and enable trust. Data Protection Day commemorates the Jan. 28, 1981 signing of Convention 108 — the first legally binding international treaty dealing with privacy and data protection.
A staggering 90% of data breaches are due to human errors, such as a laptop or phone being accessible and stolen, employers or vendors having access to information they shouldn’t, a statement being mailed to the wrong address or a WiFi account not being encrypted. Since such a large percentage of cyber attacks occur from human error, you can take steps to mitigate the risk.
The theme of this year’s Data Privacy Week is Take Control of Your Data. With that in mind, the team at Society Insurance, which provides coverage to the hospitality industry, has a few tips to help you safeguard your business against cyber attacks and what to do if one happens to you.
Make sure your restaurant is Payment Card Industry (PCI) certified. The PCI Data Security Standard is an information security standard to protect credit card data.
Use secure passwords and properly secure your WiFi network. Make sure any passwords on mobile devices are encrypted and strong.
Be skeptical of emails. Question generic greetings (i.e. “Dear Customer”) and threats regarding your financial accounts (i.e. “Please reply within five business days”).
Stay aware of changing techniques for possible data theft. Bluetooth skimmers, RAM scrapers and malware programs are three common methods that thieves use to take advantage of businesses on a regular basis, but crooks are coming up with new methods constantly. During Covid-19, phishing scams have increased 50%, according to Security Magazine. Knowledge of the enemy is important in any battle, and fighting to protect customer data is no different.
What to do if your business is the victim of a data breach? Sooner is always better. Don’t wait and don’t try to fix the situation; you’ll need professionals to step in right away.
Reach out to your financial institution.
Notify your insurance agent or carrier.
Consult local authorities.
Contact affected customers.
Even though some states don’t require you to inform impacted customers, honesty will serve you better in the long run. Incredible as the direct expenses from a data breach can be, reputational harm can also cause irreparable damage to a business.
Make sure services offered to customers fit the nature of the exposed data. If debit or credit card information was exposed, credit monitoring is a waste of money—without a Social Security number, a new credit line cannot be opened via an exposed credit card alone. Inform customers to keep an eye on their accounts and advise they speak to their bank about the breach. Most likely, the affected financial institution will issue a new card.
In 2019, 62% of customers were concerned about data breaches at restaurants, with top worries cited as stolen payment information, account takeovers and hijacked loyalty rewards points. As more restaurants have moved into online and contactless ordering, these concerns are only going to grow.
With the current restaurant landscape, the last thing a restaurant needs is a devastating data breach. Be sure to protect your business and your customers in 2024, and give attackers something else to do this year.
The post Tips For Protecting Against a Data Breach appeared first on Cheers.