compromised

So I get home tonight and see an important looking envelope waiting in my mail. I get worried when I see important looking envelopes, it's usually not good news. Sure enough, I opened it and it's from one of my credit card companies. It contained a brand new credit card, along with a little yellow slip of paper that said "my previous credit card MAY have been compromised" and that I should activate my new card asap so my other card can be deactivated. UGH! I am usually SO careful with my info, how could this of happened? So, thus begins an all night quest to find out what is going on. I'll spare you all the details, but as of now (just a little after midnight) I feel pretty secure that my info is ok. What gets me, is that the particular card that was compromised I hardly ever use. The last two companies that I did business with are AOL (which I canceled) and my webhost company. The guy from the "fraud alert", looked up my info and said that one of my previous merchants had their data compromised, so they issued the warning to my credit card, which then issued me the new card. What gets me, is that under law, the Fraud guy could NOT tell me which company had their records compromised. This just seems wrong! Because if I found out it was my webhost company, I'd switch in a heartbeat. AOL scares me because I don't trust them. They had a previous security breach back in 2001. And then of course, I need to worry now, as to how far the "bad guys" were able to compromise my info. How long will it take for me to feel "safe" again?
I did run my credit report tonight and everything looks to be in tip top shape (except for one minor error that I hope I'll be able to straighten out tomorrow).
So my fingers are crossed, that I'll be ok. Wish me luck.

PS> It strikes me as odd too, that we are told to protect our data at all costs... yet, if there is a problem, and you need to call your credit card company to straighten something like this out, you have to give over ALL your personal data to a complete stranger who won't give you anything but a first name. Kinda leaves you with a violated feeling.