Thank you for your advice. Luckily, I was never logged into their systems; simply remote viewing via screen share with an authorized user.
111 karma · joined January 1, 2015
I have a customer who told me that her manager's boyfriend was writing down customer's addresses to go rob them. The nature of the business indicates that the customer is not at their home for extended periods of time. We ended up building in user permissions to see name, address and phone number.
Edit:: I have not made up my mind yet. Admittedly, at the time of posting I was leaning more toward that side.
After reading everyone's advice, I'm leaning more toward a multi-tiered approach as @jacquesm suggested. It seems to avoid bad karma and burning bridges. Also, it seems as though the PCI Industry rarely acts on reports. So, working with the competitor to fix their issues could be the best thing down the road. It's a very small industry, and the possibility of a buy-out could exist in a few years.