Being a "outside of the USA" longer term account (aka possibly on the 2007 database) I decided to call my credit card company and see what their word was:
1. "We are experiencing a much higher volume of calls than normal, expect a 5 minute wait" --more like 17 actually.
2. "We are aware of the SOE issue and have flagged all of our accounts with any past history with SOE accordingly. We will be watching them"
3. She offered to renumber my cards if I so desired, while re-iterating that "unauthorized purchases are never your responsibility --report anomalies on your statement immediately".
Interesting that their "main" credit card database was kept in a secure environment. The wording of the press release makes it tricky to know (outside of the specific named countries) what list(s) they didn't keep secure enough.