Definately NOT clear text. The numbers were encrypted, and the database with the encryption key was in a separate database that was on an encrypted drive with only admin permissions. And all the other safegaurds imposed by PCI over the whole IT infrastructure.