Seems to be FUD
As stated by both Microsoft and the researcher in the piece, credit card data is not stored locally on the XBox. Furthermore, after I raised an issue of PCI/DSS compliance with Microsoft XBox team last December, they have implemented CVV requirements (which never existed previously) before any purchase can be made on stored credit cards.
So I think on this occassion, the "research" appears to be somewhat misleading.