Magnetic Stripe Data
PCIComplianceHubLast updated
The full contents of a payment card magnetic stripe, also called full track data or Track 1 and Track 2 data. Alongside the primary account number, cardholder name and expiration date, the tracks carry the CVV1 (CAV1) value and discretionary data. Full track data is Sensitive Authentication Data and must never be stored after authorization under any circumstances, including in application logs, transaction histories, crash dumps or debugging output. Retained track data is one of the most frequent findings in post-breach forensic investigations.