TK Maxx in the dodo

[portseven]

Anyone catch the news today about the card data fraud at TK Maxx?!!?

I am currently working on PCI compliance at my current gig, its scary tulip! Apparently compliance in a lot of UK retailers is pretty poor, some of the stuff I have been hearing about puts you off using cards.

[threaded]

Pretty poor? I'd rate it as barely existent at most places I've seen in the UK. One even logged card details in the clear right in their web logs, these were then zipped up and emailed to some other place for processing stats and developers were slurping it as test data for another system...

[ratewhore]

We couldn't agree a rate otherwise this wouldn't have happened

PCI compliance isn't scary, it's what all online traders SHOULD be doing, whether they accept credit cards or not. It's the fact they don't that keeps people like me in business.

All IMHO of course...

[portseven]

PCI compliance isn't scary, it's what all online traders SHOULD be doing

True, the PCI : DSS are pretty much common sense, what's scary is that so few retailers actually implement them

[ratewhore]

True, the PCI : DSS are pretty much common sense, what's scary is that so few retailers actually implement them

Well, we'll see what happens in June when these retailers MUST comply. It may focus their minds when they start losing the ability to process credit card payments...