Question:  We have received news that our debit cards were compromised.  Now we need to send notice to our cardholders.  Help!

Answer:  Texas law, federal banking guidelines, and the laws of several states all require breach notification.  California set the model, however.  Here is a link to a "how to" manual from California that includes sample letters:
http://www.privacy.ca.gov/recommendations/secbreach.pdf