This is decidedly different than what was stated. In your situation the credit card company did nothing to hide any data. It did nothing to conceal anything either. It was totally upfront with you and indeed even proactive in that it noticed it and called you. All commendable traits and worthy of praise.
No I was talking about a company that would refused to divulge a leak of data compromising my credit. That's way different don't you agree?
And while I'm here I also believe that there's a world of difference between a company saying "Well we just don't know how this happened, we are investigating"... *and* they send you a report of what the investigation revealed. Hey companies! It's perfectly OK to not be able to figure it out. It's the hiding of the process, the investigation, etc. that gives customers the feeling that you are incompetent and/or covering up a mistake made without taking the appropriate measures to correct the situation! That's what makes people feel good about your company - you keep things up front, inform and treat your customers with respect and do the proper investigation, retribution and correction of the problem to ensure that it will be much less likely to happen again. Anything short of that and no, you don't deserve my business - period!