One of the key tenets of the 6-year-old Payment Card Industry data security standard (PCI) is that merchants should never store unencrypted card data in their systems. But data generated from a recent ...