On Nowember this year, the company announced that its computer system had been improperly accessed by an unauthorized party. In that break, personal information of 1.5 million cardholders has been affected. The indictment says that one person (Oleg Covelin, Moldova) identified the vulnerability in RBS WorldPay's network that allowed the hackers to get in. Two other persons (Viktor Pleshchuk, Russia and Sergei Tsurikov, Estonia) developed a method by which the conspirators reverse engineered PIN (Personal Identification Numbers) from the encrypted data from network. The defendants then raise the limits on cards that receive direct payments for employees. After that they attempted to cover their tracks by destroying data on the network. The associates who carried out the actual cash were allowed to keep between 30% and 50% of the amount. Original news is posted at InformationWeek website.