Last 4 digits still an issue
Even if we believe they only retained the last 4 digits and not the whole CC number (hard to believe much they say with the weasely behaviour so far), all you need is another breach froom another site where in this case first 4 CC digits stored and you are well on your way to stitching together CC number guesses (esp when you know the Lune algorithm helps you cut down options)