These supply chains have existed since the early 90s, and it's kind of amazing that the only change since then is that carding now requires marginally sophistic

These supply chains have existed since the early 90s, and it's kind of amazing that the only change since then is that carding now requires marginally sophisticated hacking. Up until the mid-2000s, the primary carding method was Google. There were many early shopping cart systems that stored card and customer information as plain text, and those text files were publicly accessible by default. It was so easy to google for credit cards, that you could actually find cards for a specific person if you wanted.