The former employer sued, but the court ruled that the information did not count as protected trade secrets because the company didn't take reasonable security measures to protect the information. (entrepreneur.com)
We use commercially reasonable security measures and retain card information for payment processing purposes only. (ebony.com)
However, would that person have been able to attack you if there had been reasonable security measures in place when you were attacked? (hupy.com)