::
Yes, very true. This is why it should be a legal requirement to get credit card details offline asap. In fact, why are they stored at all? Once the specific transaction they were provided for has been concluded, they should be wiped off the vendor’s records for good.