It seems to me if Defender never keeps card info on file, they wouldn't send a message saying, "put some customer card information at risk". That said, if I boycotted everyone who put my information at risk due to hacking, eventually I'd boycott everyone (Target and Home Depot already mentioned). I'd start with the U.S., state and local governments. Several federal agencies, cities and state agencies have had significant (millions of individuals) data thefts from hacking. The best thing to do is keep your own computer clean, don't give information to anyone without thinking twice and never (NEVER!!!) click on a link you're not sure is safe. I'm not sure there is anywhere that is completely safe but most malware can be prevented by paying attention to what you click.