They aren't sure if they took the credit card info, and if they did, it was encrypted. No fraudulent charges have been reported yet.