It was a response to my email to them, it had my previous email underneath and that was the reply also had the correct subject field They asked for me to cover the first 12 digits on my card, so they can just see the name on card + last 4 digits. So the account is safe either way.