A replacement card is is a better reaction than most, to either do nothing or to offer credit monitoring, but the letter would have been less disturbing if they hadn't offered the "for privacy reasons" for not disclosing the processor. It's a bit like pouring salt on an open wound.