@DSJayatillake@WhingerSpice@Norv675 You’re right though, storing full PANs in an analytical warehouse is poor practice. My point is that you don’t know their infrastructure.
@DSJayatillake@WhingerSpice@Norv675 You've moved from "breaking the law" to "no legitimate reason," which is a different claim. "Payment info" isn't automatically PAN. Tokens, last-4s and payment methods are out of PCI scope. You’ve backtracked certain keywords without knowing what ASOS actually stores.
@DSJayatillake@WhingerSpice@Norv675 PCI isn't law, it's a contractual industry standard. So card data can legitimately live there with proper scoping/encryption. Almost certainly breaking the law is a big leap from guessing at someone’s infa
@WhingerSpice@DSJayatillake@Norv675 So called experts talk like they work for ASOS and know their infrastructure. It’s actually scary to see…
How do they know what sits in the DB table 😂 telling us payment information isn’t included in the db users line.
@Scott_A_Butler@byMorganWright Forgot to add but I’d hope they disabled it. From what I can see they’ve tried a different route which is offering 100% off discount codes to reel in the victims.
@Scott_A_Butler@byMorganWright Deeper, they gained access to the DB which is hosted on Snowflake. Deleting any payment information would be too late. They’ve already got it. I’d monitor anything from the banking app that seems suspicious at this point.
@_ezeo_ Computer science is a degree that’s required for a simple entry level IT role. Back when I graduated it was an entry level for a dev role. Times have changed.
@LickshotLippy It’s the awareness that we all care about at this moment in time. Also I know most of the money will be used to fund the materials for this tour.
IT Would be GREAT to see 100% of all money generated to be donated but not even charities do that.