http://news.yahoo.com/s/ap/20080328/...auPVVFRk24 cA

So the jist:
Malware sat on a retail chains server and collected/sent CC info during the process of normal CC use. No long term storage was compromised during the theft.

I say we need more capacity to fine large scalebusinesses for lax standards and stiffer penalties and extradition for the bad guys.