I just confirmed with my previous invoices that I did in fact use my debit card with BRS twice in that period and my card was compromised in January. Now I know, at least. I just don't see why they waited so long to make this public. Could have saved me the hassle of a fraud report.