Comment by arminiusreturns

Since this thread seems interested, I will reveal the main issue being that based on my analysis, reporting to PCI and the state AG would have absolutely destroyed this (very) small business and the businessowner, someone who helped me in a very rough time, and thus I felt both options were bad/wrong, but resigning without whistleblowing was the better of the two options. I appreciate the analysis and really hope I made the right choice, and if I change my mind, I can still whistleblow on this, which has been a solace in the struggle in this decision.