I have already had a card number stolen due to PSN. Someone figured out my PSN password and bought a bunch of crap from PSN with a card that was stored on the account. I didn't even realize they were storing the card info.

These online stores just need to stop keeping your card number on file.