"FYI - More wonderful publicity for Microsoft."
Having some inside knowlege about this, I can tell you that it was not the fault of any vendor in particular, it was the fault of the negligence and incompetence of their own employees.
That seems to be the case. The CardSystems employees were negligent and incompetent in choosing to deploy Microsoft products in their data center.
eEye Digital Security has announced that they are working on the problem.