Is it not clear that they're not complaining about the literal situation of credit card breach, but rather using it as analogy to being informed of a breach after the fact?