> Juspay has hashed the 16-digit debit This is factually incorrect. It’s more like a DB pointer to salted-hash which in turn gets recalculated once a week or s

> Juspay has hashed the 16-digit debit This is factually incorrect. It’s more like a DB pointer to salted-hash which in turn gets recalculated once a week or so. I’ve worked with their team, known their systems reasonably well. I’ve also lead a team that built a card store system that held nontrivial number of cards. Storing card hash anywhere will result in failing PCI audit. While the data breach is indeed bad please don’t read too much into the media reporting. It’s one thing to report the breach but this article takes it to another level by sensationalizing it.