Reply to thread

Message: <blockquote data-quote="chriton227" data-source="post: 3264111" data-attributes="member: 33263">I would be very surprised if RPGNow will be able to continue to be able to accept major cards after this.  The credit card industry implemented a data security standard known as PCI DSS in 2004, this mandates what security measures merchants need to use to secure credit card information.  All stored credit card numbers are supposed to be encrypted so that if there is a breach of data, the data is not useful without cracking the encryption.  The credit card companies are very serious about this, and seem more than willing to fine  or revoke merchant status from any company that they find that isn't in compliance.  In the event of a breach, if the merchant wasn't compliant, they are in for a world of hurt.  Just from Visa's end, if they weren't compliant when they were breached and any of the numbers were Visa cards, the fine is $100,000.  If they didn't notify Visa immediately upon discovering the breach, there is an additional fine that can be up to $500,000.  I imagine MasterCard has similar fines, since the fines are levied by the card companies, not the PCI organization.Here are details from Visa's site: <a href="http://usa.visa.com/business/accepting_visa/ops_risk_management/cisp.html" target="_blank">http://usa.visa.com/business/accepting_visa/ops_risk_management/cisp.html</a></blockquote>