Oh well that makes some sense - hopefully other companies are encrypting the data and not storing CVV. The crazy part to me is that these guys are storing this

Oh well that makes some sense - hopefully other companies are encrypting the data and not storing CVV. The crazy part to me is that these guys are storing this information for years (One of the first rows was from 2002, and the last 2010) and they're not doing any kind of recurring billing/customer profile stuff. So if I make a purchase 10 times my card is stored 10 times. To top it off, I went back on it while writing the client, and I don't even need a password to access data. I can create a valid session by setting a url parameter. :(