There's no way to keep this type of system 100% secure, but I'm willing to bet they were not doing everything they could to prevent this from occurring. At least that's been the case with pretty much every other data breach from a retailer.

Also, the images on the side-bar for that website made it impossible to fully read the article at work -.-