To be fair, the store manager’s letter was only vague in that it didn’t really explain what had happened. But it did say they were installing a new firewall on their network, stepping up encryption, and buying a remote “monitoring and support package” that includes monthly security checks (not sure how thorough of an audit that entails). So not just replacing the card readers. I’m pretty sure replacing the card readers also involves new software on the POS terminals themselves, since the old card readers required the POS terminals to spit out paper receipts for signatures, while the new ones collect signatures electronically.