"loss of customer names, credit-card numbers and the three-digit card verification values (CVVs), which merchants are not supposed to retain"

Why do merchants continue to retain any credit-card information at all after the transaction has been approved and cleared? Credit -card fraud is much too easy these days since a signature is no longer required.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/84/324#324