Those credentials are only to a specific database user though. That user might not have access to credit card tables for instance. Therefore, even if the curren

Those credentials are only to a specific database user though. That user might not have access to credit card tables for instance. Therefore, even if the current exploit provides root access, those numbers might still be safe. Furthermore, it is a much simpler matter to revoke a users credentials than to deal with a machine which has been compromised in potentially numerous ways.