Comments | misanthropoet: Fraud PSA

misanthropoet

Fraud PSA

Jul 08, 2008 09:04

Wards didn't tell consumers about credit card hack
( By BRIAN BERGSTEIN - Jun 27, 2008 NEW YORK (AP) - An old name in retail was hit by a modern scourge - a hack of its customers' credit card numbers - but didn't inform the consumers, revealing how data breaches might be heavily undercounted even with new notification laws. )

fraud psa

Comments 2

zigamorph July 8 2008, 16:58:35 UTC

their three-digit "security codes"

On the merchant side, we were always told that it was not permitted to store the CVV/CVV2 in a database, precisely for this reason.

misanthropoet July 10 2008, 23:14:08 UTC

We do not store it and never have. No merchant should. The only thing that needs to be stored is the message from the bank indicating whether or not the code matched.