I'm writing some software which has an invoicing component. Is it safe to store a bank account number and an associated sort code in a database if I use encryption? Can anything be stolen using just these two numbers?
The numbers have to be encrypted / unencrypted on the server in order to generate PDF documents.
They will be stored alongside email addresses, names and billing addresses which makes me slightly wary of doing it incase we are hacked.
What is the correct way to do this?