well possibly not. If the attackers got the keys to decrypt payment details that means that victims, in addition to the identity theft risks, may also face fraudulent transactions on those cards as a risk.
Anyone hit with fraudulent charges has to a) notice them, b) dispute them and c) go through the annoying process of having your card re-issued.
As to privacy, after the number of breaches of personal info. there have been, I'd be inclined to let the idea that this level of personal data is private :)
Don't you review your charges regularly? Even without fraud you're bound to be losing money to erroneous charges if you don't.
>b) dispute them
I've usually just had to submit a quick online form consisting almost entirely of checkboxes, while yeah that's some work it's still not going to take more than a minute of my time.
>c) go through the annoying process of having your card re-issued.
Seems like this is vastly more annoying with some card issuers than others.
I notice sure, but that doesn't mean all of the x million people who've just had their cards stolen will.
Also not all of the cardholders will be online customers, so they'll have the delights of call center processes to go through.
Whilst it's obvious you don't regard loss of your credit card information as a serious inconvenience, I don't think that's necessarily a universal sentiment.
I work at a bank, and you would be surprised how many people don't know how much they have in the bank until they get the message saying there's no money.
so many people do this. As long as they don't get that message, they don't worry about how much is in there.
