Companies that process credit-card transactions for merchants have their computers vaulted behind concrete walls, iron bars, and heavy steel doors. Employees must enter a code into a key-pad to enter the vaults. Yet, every so often information on millions of credit-card accounts is stolen without any physical break-in. How so?