Risk: Informational
A study conducted in fourteen countries and on 350 cardholders found that flaws which exist in the shopping cart software increase the risk of data thefts.
The most frequent mistake made by retailers is storing entire credit or debit card numbers. Retailers can help to prevent the risk of data theft by storing only partial numbers together with the order authorisation codes from card issuers.
The study identifies the shopping cart software as the most common entry point into online retailer data. The most frequent type of attack is an SQL injection. If successfully exploited, the hacker may be able to maliciously use a customer's username or card details.
A way of preventing such attacks is implementing secure coding principles.