Insights on PCI DSS litigation