4 ms·
>full payment card numbers storing these in plain text violates PCI-DSS
by ptah 7y ago
>full payment card numbers
storing these in plain text violates PCI-DSS
- garden3r 7y agoThe article doesn't say that they were stored in plaintext. Still a PCI violation though!
- donarb 7y agoFrom the FTC complaint: "... stored consumers’ personal information, including consumers’ SSNs, payment card information (including full or partial credit card and debit card numbers, CVVs, and expiration dates), bank account information (including account and routing numbers), and authentication credentials such as user IDs and passwords, in clear, readable text on InfoTrax’s network."
- strbean 7y agoAnd CVVs. Storing CVVs in any form breaks PCI.