I had it happen a few years ago when I restaurant I used to frequent had a data breach. Found out on a holiday weekend when I went to use my card and it was declined. When I called, I was told "but we sent you a letter explaining it and your new card will arrive in 7-10 days.". The new card arrived the next business day but it was quite frustrating. Expect a letter explaining the breach and decide at that time whether to change passwords. In my case, the data breach was at the point of sale so no passwords were involved.