This paragraph is pretty neat (assuming it's true): "The lawsuit claims that Visa discovered that Trustwave ignored the fact that Heartland didn't run a firewa

This paragraph is pretty neat (assuming it's true): "The lawsuit claims that Visa discovered that Trustwave ignored the fact that Heartland didn't run a firewall, was using vendor-supplied passwords, didn't have sufficient protection for the storage system used for card data, failed to assign unique identification to each person accessing its system, and had failed to monitor servers and cardholder data at regular intervals."