Originally posted by MTF
I used to work for a software company. Part of my job was to create marketing lists, so I had table-level access to the company's sales database.
One day I noticed we were saving people's credit card numbers in the database. I figured this was an unnecessary security risk, so I emailed the
Vice President of IT. He wrote back, telling me not to worry about it.
So I looked again, and found a sale in his name. I printed out the data - including his credit card number - and slipped it under the door of his
office.
Right after that, we started encrypting credit card numbers... |