If they were really storing credit card info, including card numbers, in plain text (which is a violation of card industry rules) they legally need to notify their customers of the breach (46 states have data breach notification laws) and they need to notify their card processor. If the plain...