My credit card was compromized a while back too.. got it sorted but I still wonder how they got it in first place...
It always seems like one companies site is compromised at some time, along with some of the actual payment processing companies, so really not surprised when it happens anymore. It's just a PIA to deal with.
Hell, when I had my physical back in June, I logged into my healthcare account to see the results of my bloodwork, and under my tab it stated I suffered from some kind of ear problem and cirrhosis of the liver due to alcohol. At first I was like "Do I really have cirrhosis of the liver from my blood tests, and my family doctor didn't call me about that?".
A few days later, I checked the site again, and all the wrongly listed conditions were removed. About 3 weeks later, my whole family received letters from the health provider stating their systems were compromised in an attack, and some personal information was stolen. On the back of the letter was a code for 2 years of credit monitoring on them. Having dealt with the T-Mobile data leak a while back (in which my social security number) was stolen due to their lackluster system protections, I also got 2 years of free credit monitoring on them.
I have a strong feeling I will continue to receive 2 year free credit monitoring letters/emails many times in the future.
