I want to know an explanation of why credit card data was stored. Is this standard? Shouldn't they only need it long enough to process the transaction - there's no reason to store it, correct?
Was the data stolen in transit (should be entirely encrypted) or stolen while at rest?
Was the data stolen in transit (should be entirely encrypted) or stolen while at rest?