Comment by staunton

> Does the credit card company have a reason to do that?

Yes. They want to make security researchers too afraid to publish their findings.