I am pretty sure if Alan is redoing his website and credit card information, it is probably a random number generator, which is encrypted. These are a lot harder to break into. You really can't blame him for dirt-bags that broke into his website. Yes, you can blame him for not notifying everyone a little quicker. Setting up new websites isn't super quick, either. Before you let thieves ruin a business, let him try to get his new system running. With an updated secure website system, your information should be secure.
I also have no affiliation with GSA. I have been there one time while visiting my in laws. They are very nice.