They were saving the CVV too which seems like a basic error. No idea why.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?