Credit Card Hacking, Financial Terrorism

I may be a bit behind in the scandal.  Have they (whether the banks sor the hackers) divulged/discovered the key to the hacking?  How did they do get all that Israeli credit card information? 

I've always been very nervous about paying for anything online.  I'm almost as paranoid about that as paying by phone.  I totally refuse to donate to any charity that calls me on the phone.  It's so easy to scam, cheat people.  Anyone can say they're calling for -charity/yeshiva etc.  There's no way to investigate a voice.

There's a line in the Israel HaYom article that has me wondering:

One list contains the credit card information of 65 purported Zionists, who purchased "stuff from Judaism web site," the hackers wrote. Another list included the details of more than 500 people who "donated to Israeli Zionist rabbis."

They must have hacked into the Jewish websites that sells Judaica and others that fund-raise.  That's a reason to go back to checks I guess.  The credit card info doesn't seem to be from the banks. Credit card companies reported that they have identified the customers whose credit card details were exposed on the Internet

Hat tip: IMRA
Here's the information and instructions from Bank of Israel, Banking Supervision Department:

Bank of Israel
Office of the Spokesperson and Economic Information
03.01.2012

Banking Supervision Department: Credit card companies reported that they
have identified the customers whose credit card details were exposed on the
Internet

As reported in the media, details of credit card customers were recently
exposed on the Internet, as a result of hackers breaking into the websites
of companies which maintained that information. Based on an initial report
submitted by credit card companies to the Banking Supervision Department,
the information was on a total of about 15,000 active cards, at the three
credit card companies—Cal (Cartisey Ashrai Le'Israel)—Israel Credit Cards;
Isracard, and Leumi Card. The Banking Supervision Department is in continuous contact with the companies in order to investigate the event, the circumstances of its occurrence, and actions being taken to deal with the occurrence.

The credit card companies reported that they have identified the cards of the customers whose details were exposed on the Internet, and the cards have been blocked for use in Internet purchases and telephone purchases. This is expected to prevent fraudulent use of the cards through these methods, following the exposure of the information. The companies are contacting the customers in order to exchange the cards that they own. Service centers of all the companies are set to provide answers to customers, and customers who suspect that their card has been misused can turn to the credit card company in order to look into the need to cancel the charge.

The Banking Supervision Department wishes to clarify that the customers will not bear responsibility for fraudulent use of the cards as a result of the exposure of their details as noted above, in accordance with the instructions of the Debit Card Law. In any case, the Banking Supervision Department recommends that customers examine the charges on their credit card statement or at the websites of the credit card companies in order to
identify transactions that they did not conduct. Any problem should be reported to the credit card companies as soon as possible.