40 million! --Schumer's on it with a bill, but too many Senators and Reps get too much money from all those companies and banks to do anything about it.

damage control!

Hasn't this kind of thing happened more than once in the last few weeks? Scary.

Gee, I haven't used the only credit card I have for over 60 days. "I am the MasterCard of my own domain!"

This has never happened on this kind of scale before. I work in the fraud department of a small-ish financial, so this is going to be all kinds of fun for us.

So CardSystems screws up, retains all this card data that they're not supposed to in the first place, to prevent just this kind of thing from happening, and leaves card issuers (like me) to clean up the mess.

Banks and credit unions are the ones that actually suffer the losses from the fraudulent activity, but as far as I know the processors (like CardSystems) have never been held liable, even though they were responsible for the security hole in the first place. Given the much larger scale of this attack, that might change now, though.