I understand the policy of recording the information when people buy ammo from CT. But why is it recorded and left in a folder where the ammo is stored? Any gang banger can get a job at CT and have a great shopping list of who owns guns and where they live. Or for that matter just break into the cabinet and steal the book. Why can't they do what gunshops do, and just keep the address info secure in a computer so the staff just has to verify by ID that the person has purchased ammo in the past?