[antiRepublicrat]

The unknown hackers’ sniffers were able to pick up credit card numbers because the data is sent unencrypted over Heartland’s internal network, a policy that Baldin justified as necessary “to get the authorization request out.”

Big fat honkin' male bovine excrement! Ever heard of hardware encryption, practically instantaneous? Ever heard of IPSec? This is just an excuse for poor security practices.

[randog]

This is just an excuse for poor security practices.

Yup. Heartland basically allowed their HR department to define their internal security. I'll betcha the HR director said, "Him?! He's the last guy I woulda suspected!!"