So I assume that the cards didn't necessarily have to ever have been used on the internet to be compromised? Cards that had actually been swiped at a merchant store somewhere were in the database that was hacked, not just cards collected on the net? That's what it is sounding like to me.
That distinction needs to be made, because the way the news pushes it makes it sound like another case of cards used on the internet getting swiped, but if their DB of card transaction on and offline are merged and that is what was hacked, then a person is no more safe from this hack by having used their card at their local gas station.
|