Frankly, this is what's wrong with the system. Who got hacked? Was it a utility? A big box retailer? The pizza shop on the corner? I know you personally can't do shit about it, but as long as consumers are left in the dark like this, the issuing institutions increase customer anger and make the CSR's bear the brunt of it. Knowing who got sliced helps people determine their own potential exposure... If it's McDonald's, well, no big deal. They swipe my card and it's over with, there's no potential for username/password shenanigans. If it's Amazon's one-click checkout, well, it would be very helpful to tell folks that there could be collateral damage, and changing their passwords is a Very Good Idea (because using the same user/pass for multiple websites is something nobody ever does, right??)