Ok, let me explain why there is no basis on the claim on Rebug.
POINT 1
In a software development environment, you have the Dev environment, UAT and Live (Sometimes a couple in between as well). The Dev and UAT environments will NEVER have access to sensitive data (like CC numbers, account info etc). The reason is that a clever dev can then do some transfers themselves and cover his tracks. I have been in the IT field for over 17 years (Yes, i am an old Geezer), and Im talking from previous experience.
POINT 2
The publishers should, and never would, have access to your CC and account details. All they should get from the PSN network is data pertaining to what they offer. This mean an email address, PS ID, Trophy details etc - but NO CC details since that breaches so many data protections acts in the EU, Asia and the USA. Why is this important you ask? The Dev and UAT environments are open to the publishers. It was created for them to test their products, and DLCs integrated into the PSN system. See my first point on this environments.
So please, anyone who think Rebug people went in and steal CC details or some other crap, get your f-ing facts straight.