Notify Visa of vulnerable payment applications Visa has identified that certain payment applications are designed by software vendors to store sensitive cardholder data (i.e. full magnetic stripe data, CVV2 or PIN data) subsequent to transaction authorisation. Storage of these cardholder data elements is in direct violation of the PCI DSS and Visa rules.