Grr another reason to hate live. Anyone else think that this might be the death knell of consoles? If they can't protect their customers information, those machines might as well be called theft-boxes.
You could argue the pc companies have the same issue, but they tend to not have credit card info. Also, its not one stop shopping. EA screws up and releases your info? Stop buying from EA. Console users have no such option.
Anyhow, not saying that this attack alone will kill the console market, but if these type of attacks continue, I can see it easily causing negative console growth.