Hacker News Reader

Looks like some of these are showing a customer's physical address too. I sure hope that wouldn't be PCI compliant.

https://www.clkbank.com/orderDetail.htm?rcpt=504d78866YCRFEF... (Click on View Details under Tracking Number)

PCI is designed to protect credit card fraud, not customer's address information. Banks don't care about the risk of identify theft, but rather credit card fraud.

Reply on news.ycombinator.com