I would tend to agree with you but it was the standard 2 call process. They left a message to call their security department and I call Discover Card directly. Once I entered my identifying details (last 4 digits of card, last 4 digits of social, billing zip code) I was immediately transferred to the Fraud department where they told me that I would get new cards via courier and that I needed to re-register them with a new online profile that should be different than my old one. I did not provide any provide any details like my full social or the CVV on the card.

There should be a DHL package on my front porch with 2 new cards this evening so I will double check and let you guys know.

I wholeheartedly agree that this would be a PR nightmare if they did not openly disclose fully and swiftly. Because they did not tell me specifically the reason for why I needed new cards and a new online profile is what raised my suspicion.