It amazes me how many merchants are still storing credit card numbers.   This occurs in many forms.   Some merchants have their credit card numbers stored within QuickBooks.   Others have their credit card numbers in their home grown Microsoft Access, FileMaker, 4D or other database.   Still others have them on paper forms, in e-mails, in Microsoft Excel, or other locations. Hanging onto credit cards in any format is a big risk!   Fines are steep if those card numbers are stolen.   And it does happen!   My favorite story is about a merchant that kept the credit card numbers of their customers on paper files, and locked those files in the trunk of the owners car.  Pretty secure huh?  Well, it was ... until the car was stolen. It is so much better to use a popular system commonly referred to as tokenization.  Essentially all of the credit card information, ACH information, and other sensitive bil...