hmmm.. my card was compromised a few months back too. No idea how they got the info and they went as far as changing my address and ordering themselves a new card. Had to close the account out and make a new one, but never heard anything more about how they managed to do that or where they managed to get the info. If they hacked BRs I think that would give them the info needed to do it, but I have not received a letter from them.
Either way this rash of companies getting hacked is out of control right now. I can think of at least 3 companies right now that have been hacked recently that would have my info so could have come from any one of those or maybe even some others that we hadnt heard about yet.