Techweb article shows possible reasons for the recent Citibank PIN scandal (large number of PINs for debit cards were stolen and new cards released in UK, Russia and Canada).
It happens (according to the article) that PIN encrypted data and keys used to encrypt them are kept at the same place. The question is why the PIN data is stored at all...