K's story is that a vender allowed personal information of pharmacy customers, among others, to get stolen. Naturally k has no knowledge of any actual harm done and will no longer be associated with the vendor. Problem solved and nothing suspicious going on here. Maybe the k pharmacy and k generally should not be trusted with any of your personal information, just to be sure.
Yes, stuff like this really sucks when it happens. In reality it most likely effects hundreds of companies, and until it happens you have no idea the data isn't 100% secure. OH...and I'm surprise stuff like this doesn't happen more often. If a hackers wants to break in, they will keep at it until they find a hole. Remember no data is 100% secure and most data lives on forever in some fashion.