Legally, e-commerce sites must not store card details in their own systems; they should only use them when sending transactions.
Unfortunately, some sites do not follow this rule. That is why you need to make sure the site you shop on belongs to a trustworthy company.
Recently, it was reported that the data of 6.5 million customers of a large American women's fashion retailer had been stolen. The fact that the company did not store its customers' card details prevented a major disaster.
Recently, a similar situation occurred on a website in our country. Since the site kept customers' payment and personal information, it had to share the following text with its customers.
We are sending you this email because you bought or tried to buy a ticket between ******* and *****. Although we have no evidence that your information has been accessed, we are informing you as a maximum precaution. Our forensic and security expert teams continue to work non-stop to investigate the causes of this incident. We continue to work with the relevant authorities, credit card organizations and banks on this matter.
For this reason, in addition to the trustworthiness of the sites you transact with, their resilience against possible cyberattacks is also important. Don't dismiss it as just a purchase: your card details may not be safe after the purchase either.
