Company I work with that uses Paypal is not PCI compliant. What to do?

[Wayofcain]

Hello,

A company I do business is not PCI compliant. They have every customer's credit card information in customer files stored in unlocked file cabinets in their main office and cabinets in other areas around general labor employees. They also keep them written on sticky notes and other various places sitting around. I've even seen them written on their warehouse pick tickets that travek through the entire company. 

I am also aware that they keep the Credit Card info in their order system under their customer notes that any and all users can see. They do this because it is easy for them.

At this point I need to be a whistle blower because they will not listen and refuse to change. 

Who should I report them to, they are currently using PayPal as their credit card gateway.

Thanks.

[Whac-A-Mole]

sloppy record keeping is not a crime,you should talk to the owner as he will understand the consequence,it will hurt his business/

[Wayofcain]

I have, multiple times. They refuse to believe anything is wrong.

[DPCreations]

Do a Google search for Payment Card Industry Standards.  You might find the place to report something.