I have just heard Dido Harding on R4. She was asked "Can you confirm that customer data was encrypted". She refused to answer that it had been. Make of that what you will.
All I can say is I work in IT security and I do a lot of the security work which goes into firms being PCI (Payment Card Industry) certified... 99% of firms are using windows server 2003 and have customer details in clear text format. I have found bank details of customers in some of the largest retailers, stored in .txt files.
You say banks are better, ermm.... ok.
Edited by ukhardy07 (Sat 24-Oct-15 02:14:58)