Some clarity on the data: the emails that all the media are talking about are what people used to sign up. Lots are fake and unconfirmed and so far, this is the only source of information people have been posting publicly on searchable web sites.
The credit card info is the problem. Your card is not in danger as only the last 4 digits were stored, but all the information you need to enter confirming that this was your card is there. Real name, address, IP, city, province, country, date you paid and how much you paid.
No one that I know of so far has put out a searchable database with this information. Legally, I'm assuming you can get in huge trouble by doing this, but it will come.
I'm on there. I thought I was doing everything right and before this happened, I was golden. Had some fun with a few ladies and none had any idea of who I was outside of a fake email address. They knew what I looked like and my first name, that's it. It was perfect.
But the credit card...fuck me. I'm incredibly cautious and took a lot of steps to avoid being caught. Hell, I didn't even tell my closest friends. That's how people get busted, they are sloppy and tell people. You have to pay if you want to message anyone on that site though and I figured that since the wife has no access to my credit card history, it should be ok.
The only saving grace to all of this is the sheer volume of information and likelihood that someone would have to really look for it. However, all it takes is one person to see your name and start passing the info on. I found a guy that works down the hall from me. Every time I see him I'll have to wonder if he did the same and found me.
I'll be living on pins and needles for a while, no doubt about it. I have a ready made explanation to go if the day comes, but it probably won't matter...I'll be fucked. We'll see.