There are plenty of small &quot;mom &amp; pop&quot; sites out there that store full credit card info, in plain text, in unsecured databases, in blatant disregard of card company policies. They go with the thinking that it costs to much to implement security and nothing will ever happen to us. We hear about the big breaches on the news, but I would bet for every big breach we hear about on the news there are thousands of smaller breaches that don&#x27;t get recognized.<p>For example, about two years ago I had a property management company ask me to build out a site to handle rent payments for them. They wanted to store and have access to the full credit card numbers to manually process transactions for failed or late payments. When I told them they were not allowed to do that they terminated the contract with me. I know they went on to hire a developer to build out a site for them and store credit card numbers. While I don&#x27;t know if they are still doing it, it did happen for an extensive period of time.