What i dont understand is the passwords - were they stored as plain text?
I'm a software engineer at work and work on the back end / Data storage etc and right now i'm having to rewrite all of our systems to become PCI compliant where it states if Credit Card data is storedthen all passwords must be encrypted and that encryption must be of an approved standrds by the PCI test team.
We're actually opting for not storing credit card information anymore and are using a PCI approved company to store them for us so how have our passwords been comprimised?







