I think it was hacked in February or March but they only made it public yesterday...so yeah, somebody already has a credit card out in YOUR name, somewhere...and it isn't you.
Meh, yet another business that can't be bothered maintain security. It's barely news nowadays - it's more or less expected.