Magento: Erase saved credit card data

-- get order with saved cc data
SELECT so.increment_id
FROM sales_order_entity_varchar soev
INNER JOIN sales_order_entity soe ON soev.entity_id = soe.entity_id
INNER JOIN sales_order so ON soe.parent_id = so.entity_id
WHERE soev.attribute_id = 280
AND soev.VALUE != ""
 
-- get saved credit card owner
select value
from sales_order_entity_varchar
where attribute_id = 282 
and entity_id in (
    select entity_id
    from sales_order_entity_varchar
    where attribute_id = 280 
    and value != ""
);
 
-- erase credit card data by order id
SET @orderId = '100000013';
 
UPDATE sales_order_entity_varchar
SET VALUE = NULL
WHERE entity_id = (
    SELECT entity_id
    FROM sales_order_entity
    WHERE entity_type_id =14
    AND parent_id = (
        SELECT entity_id
        FROM sales_order
        WHERE increment_id = @orderId
    ) 
)
AND attribute_id IN (
    SELECT attribute_id
    FROM eav_attribute
    WHERE attribute_code LIKE 'cc_%'
);
 
-- erase credit card data by cc owner
SET @ccOwner = 'Mr. Smith';
SET @entityId = (select entity_id from sales_order_entity_varchar where value = @ccOwner);
 
update sales_order_entity_varchar
set value = null
where entity_id = @entityId
and attribute_id in (
    SELECT attribute_id
    FROM eav_attribute
    WHERE attribute_code LIKE 'cc_%'
);
 
-- get attribute ids
SELECT attribute_id
FROM eav_attribute
where attribute_code in ('cc_number_enc', 'cc_last4', 'cc_owner', 'cc_exp_month', 'cc_exp_year', 'cc_type');
 
-- script to autocheck saved cc data
http://www.panticz.de/sites/default/files/magento/creditcard/checkSavedCcData.sh
 
#!/bin/bash

DB_USER=YOUR_USER
DB_PASS=YOUR_PASS
DB_NAME=YOUR_DB
MAIL_TO=YOUR_EMAIL
 
# search for saved cc customer
echo 'SELECT VALUE FROM sales_order_entity_varchar WHERE attribute_id = 282 AND entity_id IN (SELECT entity_id FROM sales_order_entity_varchar WHERE attribute_id = 280 AND VALUE != "")' | mysql -u ${DB_USER} -p${DB_PASS} ${DB_NAME} > /tmp/cc.log
 
# notify 
if [ $(cat /tmp/cc.log | wc -l) -gt 1 ]; then
    echo 'Subject: Please delete CC data' | cat - /tmp/cc.log | sendmail ${MAIL_TO}
fi
 
# clean up
rm /tmp/cc.log