Personally identifiable information (PII) is just as much a target for cyberthieves as credit card numbers and security codes. However, there is no equivalent protection regime for PII that matches PCI DSS for payment card numbers. PII includes names, email addresses, phone numbers, shipping and billing addresses, IP addresses, order histories as well as device and browser information. Criminals obtain PII by exploiting business logic vulnerabilities in applications. PII can’t be fully protected against either the nefarious actions of a company insider or the simple carelessness of an ...