The New York-based credit-card processor left a server without password protection for approximately three weeks.

from Dark Reading: https://ift.tt/3cIWzaE
via IFTTT