The bizarre back-and-forth claims about the San Francisco network admin who was arrested after refusing to reveal key network passwords raises some troubling issues. Most pointedly, there appears to be some evidence that this admin was fired and arrested partially for having engaged in the precise security procedures that he was paid to deliver.
It may not directly impact a retailer, but the network security issues raised here are certainly relevant. Check out this wonderful analysis piece in InfoWorld that does the best job of summarizing and explaining the case that I've yet seen.