They know about the unauthorized release of personal data, they have procedures to try and protect data, but there is a commercial imperative to keep customers happy when they have a problem with their credit card.