I once got a debit card with the CVC number 000. Now, in theory, I know there’s nothing wrong with this. The number was chosen randomly and it being “special” is purely in my head. In fact, if 000 were excluded from the picking process, there’d be fewer possible CVCs and so overall they’d be less secure. But, 000 still feels really wrong as a CVC. Was it a bug? Did an entire batch of cards get generated with the same CVC?