This is one of those examples when it is not a good idea to "save" your credit card information on a website.
British Airways fined £20m over data breach
"The data stolen included log in, payment card and travel booking details as well name and address information."
Remember this the next time your purchase online asks if you want to save the credit card number.