Re: What could possibly...?
To me identity theft and payment details are very different things.
Identity theft is serious because they can create new accounts I don't know about, and that's hard to resolve. Account numbers, likewise, I try to guard a bit (because you can do a bank draft with them.)
But credit card numbers? I long ago stopped freaking out about those. If my number gets stolen I flag the transaction, the bank refunds it, and they send me a new card with a different number. It's a minor hassle. The threat model doesn't usually involve anything PC-related, either; around here it's mostly skimmers on card-enabled gas pumps.