<?xml version="1.0" encoding="UTF-8"?>
<alert>
<title>Possible Credit Card Data Detected</title>
	
	<class>Personally Identifiable Information (PII)</class>
	<severity>High</severity>

	<impact>Vega has detected a string of digits that have some of the properties of credit card numbers.</impact>
        <impact>Unauthorized disclosure of this information could lead to fraud, or identity theft.</impact>
        <impact>Unauthorized disclosure could also lead to regulatory penalties.</impact>

	<remediation>This should be investigated to identify the nature of the data matching the detection pattern. The root cause of a disclosure could be test data, a flat file database, or the triggering of some unexpected vulnerability. </remediation>

	<discussion>Vega has detected a string of digits that have similar characteristics to credit card numbers. This should be reviewed carefully (which can be done by examining the server response). </discussion>

	<references>
		<url address="http://www.merriampark.com/anatomycc.htm">Anatomy of a Credit Card Number</url>
	</references>

</alert>

