Identifying people whose credit card details were stolen