When it comes to data breaches, the words ‘payment processor’ set off an extra-special alarm