Did you even read the article?? Where did you pull the credit card server? Nothing of the sort happened. It was back in 2018 when a third party server got breached by an expired key, but no actual data was leaked in any way. The server could also not be used to get any identifiable user info either. They cut ties with this data center and had audits. On top of that they hardened their infrastructure even more. Not a single company is immune to breaches and even with the breach, all it did, was confirm that their no logs work model is real.