For the first time ever, I received this message. I assume that my credit card info can be accessed by bad actors.

Since I have not seen this, were changes made or has it always been this way and my security settings are now alerting me?