Many retail chains I've gone to have the capability to look up your entire purchase history via a credit card, or to refund a purchase to the card that was used.
I don't know if they store the card details directly or if they store a hash, but they certainly have a way to tie your credit card to the video of your face leaving the store and (most likely) a video of your license plate as you drive away.
Sell that to a data broker (as they certainly do in the US) and someone could potentially purchase a history of what you bought anywhere and when.
I've had that experience too. I assume they use your card details to find your internal customer identifier or something and then discard the card details.
Comments
Many retail chains I've gone to have the capability to look up your entire purchase history via a credit card, or to refund a purchase to the card that was used.
I don't know if they store the card details directly or if they store a hash, but they certainly have a way to tie your credit card to the video of your face leaving the store and (most likely) a video of your license plate as you drive away.
Sell that to a data broker (as they certainly do in the US) and someone could potentially purchase a history of what you bought anywhere and when.
I've had that experience too. I assume they use your card details to find your internal customer identifier or something and then discard the card details.
Don't they have to maintain that mapping to keep it available?