Twice now I have received new debit cards from the bank with a letter saying there was a breach at a company where I did business. So that's what they're doing now, at least in some cases. The companies, rather than announcing a breach, are getting the banks to cover for them.
It's not unusual on bank/financial shops to be told how secure and hack-proof their systems are. I don't actually laugh at them, it would be impolite. But I want to.