It wouldn't have been a big issue, but they should have never ever save the credit card informations on a db. I don't know what makes people so confident they can save others credit card on a db.
I would rather prefer to repost the needed details for every purchase.
I would rather prefer to repost the needed details for every purchase.