Are banks required to disclose details if a credit card is compromised?

[tinkeya]

We were just informed by our credit union that our credit card may have been compromised. They said that there were no charges on it as yet, have frozen that account and will be issuing a new card. They indicated that they will not (or cannot) tell us how or where this happened. We had only made a few merchant purchases in the prior days, and do not do on-line purchasing except for a standing order to pay for a Netflix subscription. We had, however, just done an on-line transaction on the credit union's secure (supposedly) Website to transfer money from checking to pay off the credit card balance before leaving on an extended trip.

Do consumers have any legal rights to get information from banks/credit card issuers about the details of their cards being "compromised"? It strikes me that we would all be better informed and more cautious if we could have this specific information. I can see that if there is a problem on their end, they may be very unwilling to disclose it!