I am a Bank of America costumer and I have had my debit card replaced 3 times in the past 9 months because of a " data breech '' at an " undisclosed merchant. '' Bank of America will not disclose WHO the merchant ( s ) are or the situations leading to the breech. Going thru and updating XXXX auto-pay accts every 3 months is a hassle and as I am the customer, I feel that the absolute LEAST Bank of America can do is inform its customers of how/why my information was released. It 's as though they are protecting merchants instead of their customers 
