You can declare compensation from the web site with the economical damage as they've breached the information security law by not delivering adequate security when processing knowledge. The technological storage or access is strictly needed for the legit purpose of enabling the usage of a certain service explicitly asked for https://nathanlabsadvisory.com/ensuring-secure-payment-processing-with-pci-dss-compliance-certification-in-the-usa/