merchants should not store credit cards in any form.
pretty much every payment processor / gateway allows you to create payment profiles with reference ids which you can store and reuse later to process additional payments.
if DISH got hacked, all the hacker should be able to get are useless payment profile ids.
EDIT: i hope everyone who's downvoting me does extensive pen testing and security audits on their servers/network. storing even properly encrypted card info is a huge liability.
pretty much every payment processor / gateway allows you to create payment profiles with reference ids which you can store and reuse later to process additional payments.
if DISH got hacked, all the hacker should be able to get are useless payment profile ids.
EDIT: i hope everyone who's downvoting me does extensive pen testing and security audits on their servers/network. storing even properly encrypted card info is a huge liability.