When To Layer Encryption
...encryption on all financial information after a breach. In their case, they were encrypting their database and backup tapes. Not that there isnt a valid reason to encrypt databases and backup tapes, but the way they were implementing provided no additional security. Once those card numbers were encrypted in the DB, re-encrypting at the tape...
