Man that's real bad for them, imagine all the CC details that they store, and no doubt the idiots kept the encryption key on the same server..