This is the IP of the hacker: 188.75.86.66 (It's possible this is a bounce server, but geo locating it suggests against this.)
I know because I was involved in cleaning up one of the hacks. (I have to stay anonymous, but my main account has more than 7000 karma.)
In the one I dealt with they did not copy stored cards (because they couldn't), but rather added extra code that would email a copy of the details to the hacker as the order was placed.
(So even with PCI compliance credit card numbers can still be stolen.)
I know because I was involved in cleaning up one of the hacks. (I have to stay anonymous, but my main account has more than 7000 karma.)
In the one I dealt with they did not copy stored cards (because they couldn't), but rather added extra code that would email a copy of the details to the hacker as the order was placed.
(So even with PCI compliance credit card numbers can still be stolen.)