Re: It's stolen from a transaction that happened in the past.
In which case someones PCI-DSS compliance has lied - thus removing any liability from the cardholder.
In which case someones PCI-DSS compliance has lied - thus removing any liability from the cardholder.