Companies struggle to maintain PCI compliance within a year of meeting it, according to a new payment security report by Verizon.

Sadly, this is not surprising.  Many businesses are chasing compliance and not seeking real security.  They are trying to check boxes and not secure data.  True data centric security requires dedication and effort.  It is not a package to purchase or a spreadsheet to fill out.

https://www.darkreading.com/endpoint/verizon-report-businesses-hit-with-payment-card-breaches-not-fully-pci-compliant/d/d-id/1329778