PCI DSS is a relatively new thing. Before it card data flew in the open