I think we need to start storing all pins with encryption, that can only be decoded with a specific password that is typed in by the customer at the time of access. That way if they reset the pin, they can determine who jacked the account. Why have we yet to swap from 4 digit pins to say... 8 character strong passwords... I'm ok with chicken pecking a keyboard on an atm if it keeps my pin safe...