As supporting evidence, the reason "no payment information was compromised" is almost certainly because the payment processors have stricter security requiremen

As supporting evidence, the reason "no payment information was compromised" is almost certainly because the payment processors have stricter security requirements, and can punish a company which does not follow them.