Most US states have breach notification laws. It does vary from state to state quite a bit but in most cases they would need to notify you if the knew that someone grabbed your credit card details. Here is a list of the laws http://www.ncsl.org/default.aspx?tabid=13489