VirtueMart has the option of storing credit card numbers or not. It is best to have this setting turned off and we will only turn this on if requested (if credit cards are processed offline, then you need this turned on). If it is on, then the information stored is encrypted and can only be retrieved if you login securely (https instead of http in the URL).