Hacker News Reader

It shouldn’t be an issue given that for compliance reasons they don’t store credit card data and instead use a third party, and even if they got access to the API keys for that provider, they shouldn’t have access to enough data to somehow use your card.

Steal your money? No. Steal the banks money, using your account details to defraud a bank, possibly createing a headache for you? Maybe.

Potentially yes, very likely yes it seems.

How so? Any more details you can provide about how CC data might be compromised in this case?