Someone just lost 324k payment records, complete with CVVs

Re:Someone just lost 324k payment records, complete with CVVs by pjc50 on Wednesday September 14, 2016 @07:09AM (#12495679)

While we're on the subject, how do Amazon get a pass for not making the user re-enter the CVV for every transaction?

[ Parent | on HN ]

Re:Someone just lost 324k payment records, complete with CVVs by chillydawg on Wednesday September 14, 2016 @09:03AM (#12496397)

When you're amazon, you can negotiate anything. They're probably the single biggest online credit card merchant.

[ Parent | on HN ]

Re:Someone just lost 324k payment records, complete with CVVs by TimWolla on Wednesday September 14, 2016 @10:25AM (#12497136)

AFAIK the CVV is not required to perform a transaction. It's just that you take the hit in case a fraud occurs when you don't check the CVV.

[ Parent | on HN ]

Re:Someone just lost 324k payment records, complete with CVVs by devicenull on Wednesday September 14, 2016 @07:16PM (#12502024)

Depends on your merchant account I believe. We tokenize them somehow, and can do further transactions by referencing the first transaction.

[ Parent | on HN ]

Re:Someone just lost 324k payment records, complete with CVVs by arcdigital on Friday September 16, 2016 @04:03AM (#12512564)

You don't need to make the user enter the CVV for any transaction, it just helps with a lower fee and to shift the chargeback liability.

[ Parent | on HN ]