Security of your personal and account information requires a partnership between the trained personnel of MCFCU and you, a MCFCU member.  Our security policy and privacy policy are reviewed semi-annually to ensure they incorporate recent mandates and provide information helpful to our members.  The information listed here is provided to reassure our members of the procedures we have in place to safeguard you and your information and to provide an awareness of actions you can take to keep your personal information secure.

Physical Protections-Security and Safety

We maintain a physical facility with the purpose of providing you with a safe place to conduct business with the staff and employees of MCFCU.  We have incorporated physical security measures into our facility, and we maintain electronic and procedural safeguards to ensure the security and confidentiality of your personal information and transactions with MCFCU.  All our actions are performed in compliance with federal regulations and leading industry practices in order to safeguard your nonpublic personal information.

Each of our employees is trained on the steps to take in the event of an emergency or suspected fraud or other criminal act regarding your account or personal information.  If such a situation occurs, MCFCU employees and staff will work in cooperation with the appropriate public safety and/or governmental agencies conducting the investigation to resolve the matter.

Security of Online Information

Because methods used for the purpose of identity theft and the compromising of personal information are ever changing, we at MCFCU are continually assessing new technology as it becomes available for safeguarding your information.  We also routinely post on the main page of the MCFCU website (www.missioncityfcu.org) safety tips to protect and inform our members of methods they can individually use to safeguard their personal information.

Access to online transactions with MCFCU, whether by using the website or ATM, is protected by your own PIN (Personal Identification Number), a personal password and, when warranted, a verification security question determined by you.  We encourage you to keep these items confidential. 

Our website is secure and our servers are protected by a firewall so you may conduct transactions securely and the archiving of your information is safe from viruses, intrusion and readily available.  Determining security while conducting transactions can be done in the following manner: 1) A locked padlock logo should appear to the right of the webpage address on the login page.  Additionally, the Verisign Secured logo should appear at the bottom of the login page.  2)  By selecting the locked padlock logo or the Verisign Secured logo, you can verify that current security certificates are present to protect your online transaction(s).

Web browsers also provide encryption of your information when conducting online transactions.  This is an added level of protection.  MCFCU recommends that you use the latest version of either Internet Explorer, Mozilla Firefox, or Safari when conducting online transactions.   Verification of encryption can be done by making sure your browser is SSL (Secure Socket Layer) encrypted.  This can be determined by checking for HTTPS:// in the location bar of your web browser.  The "S" signifies the line you are using is secure.

The MCFCU website will automatically log you off after 15 mintues of inactivity, leaving the last page you accessed visible.  This is an added protection should you forget to log off when conducting an online transaction.

Additional information about safeguarding your personal and account information is available on the MCFCU website.  You will find it at the bottom of the sign-in page.  Select the "About Internet Security" link to be redirected to the "Protect Privacy" website.

If you think your password or PIN has been compromised, call us at 408-244-5818  or toll free at 1-888-361-1894 Monday through Friday from 9:00am to 5:15 pm PST.

Security and Confidentiality of Members Records

Our employees are trained and receive regularly updated information regarding the importance of maintaing confidentiality and your privacy.  They are trained to restrict access to your personal financial information by anyone rather than those you have authorized to have access.  Information regarding our members is only provided to MCFCU employees who have a need to know to facilitate processes related to your account(s) or to provide products or services to you from MCFCU.  While some physical records are kept securely at the MCFCU facility, most records, including online transactions, are kept off site on secure electronic servers to provide additional levels of security.  All vital records retained by MCFCU are done so in compliance with mandates established by the NCUA (National Credit Union Administration).

We at MCFCU do not sell or share current or past members information with anyone except as permitted or required by law.

MCFCU employees and staff will never contact you by phone, mail or electronically to ask for your personal information, account information or PIN.  Should you be contacted in such a manner, do not provide any information to the requestor.  Instead, contact MCFCU immediately at 408-244-5818, Toll Free 1-888-361-1894 or in person so appropriate action can be taken.

Breech of Sensitive member information 

It is imperative that staff of MCFCU remain vigilant in preventing unauthorized access to sensitive information entrusted to staff by it's members.  These are the steps outlined to be taken by MCFCU staff, should it be discovered that any sensitve member information¹ entrusted to MCFCU has been compromised.

The steps to be taken are follows:

1) Immediately notify the Operations Manager or in his/her absence the President/CEO.

2) Assess the nature and scope of the incident.

      a. Identify what system(s) was accessed. 

      b. Identify what information was accessed or misused.

      c. Identify what members are impacted.

3) Take immediate steps to contain and control the breech and prevent further unauthorized access.  Steps may include freezing or closing affected accounts or close monitoring of account activity.

4) Notify the National Credit Union Administration (NCUA) Regional Director if the incident involves the information systems maintained by one of our service providers.

5) Notify local law enforcement.

   a. Preserve all records and items of evidentiary value.

   b. File a Suspisious Activity Report (SAR) if a Federal criminal violation is identified.

6) Notify the Board of Directors

   a. President/CEO will notify the members of the Board of Directors.

7) Notify members if warranted.

   a. Notification will be made in all incidents where the accessed information has been used, it is reasonably possible it will be used, or the accessed information could result in substantial harm or inconvenience to any MCFCU member.

       i. Note: Law inforcement's investigation may delay notification if it will interfere with the criminal investigation  and they have provided a written request for the delay to MCFCU.

  b.  If group files have been accessed and it is not possible to identify the specific members that may be reasonably impacted, MCFCU should notify all members in the group.

  c.  When notification is warranted to a large number of members, the Operations Manager or designee will notify the consumer reporting agencies, i.e. Experian, Equifax and TRW.

8)  Notification will be timely.

9) Notification will be done in the most expeditious manner; i.e. telephone, mail or electronic mail.  A notification record will be maintained indicating the method, date and person who preformed the notification.

10) Notification will include the following:

     a. A clear and conspicuous description of the incident.

     b. The type of information that was accessed.

     c. A description of steps MCFCU has taken to protect our members' information.

     d. A designated MCFCU telephone number for further information and assistance.

     e. A recommendation for members to stay vigilant for the next twelve to twenty-four months regarding the use of their identity, financial records and sensitive information.

     f.  A recommendation that they review their account statement and immediately report any suspicious activity to MCFCU.

    g. A recommendation that affected members should promptly report any incidents of suspected identity theft to MCFCU and law enforcement.

   h. Instructions on how the member can obtain a free credit report.

   i. A recommendation that members periodically obtain their credit report and review it for disparities.

   j. A description of fraud alerts and the steps the members can take to place a fraud alert in their consumer reports.

  k. The Federal Trad Commission's (FTC) website address, http://www.ftc.gov, toll-free telephone number, 1-877-438-4338/TTY 1-877-653-4261, for steps to prevent identity theft.

  l. A recommendation that they should report any incidents of identity theft to the FTC.

 NOTE

¹ Sensitive member information is defined by the NCUA as: A member's name, address, or telephone number, in conjunction with the member's social security number, driver's license number, account number, credit or debit card number, personal identification number (PIN), password permitting access to the member's account and any combination of components of member information that would allow someone to log onto or access the member's account, such as user name and password or password and account number.