[Jeremy]

My guess is that phone call was an identity theft scam attempt, not actually from Discover. Did they want you to go to a special url to sign up?

Having worked in the IT department of a bank where customer data was compromised before, I know first hand this isn't the kind of thing they can just sweep under the rug, nor do they want to.

The word is going to get out if customer data was compromised and believe me, they want to be the ones who break and control the story. Having it be discovered later would be devastating to them. There is nothing on any of the news sites about this, so to me at least it has scam written all over it.