People say that delta shouldn’t have been storing CVC numbers (fair point), but note that the breach was upstream of them at MoveIT, which supplies an on-prem f

People say that delta shouldn’t have been storing CVC numbers (fair point), but note that the breach was upstream of them at MoveIT, which supplies an on-prem file transfer program and cloud offerings specifically for managing PCI environments. The real WTF is that the PCI compliance vendor’s solution led to them storing that data. “It’s your only job,” and all that…