Could be Epic, could be privacy.com, or could be malware on your system. But every time I’ve tried alerting places they are leaking credit card #'s, I get the runaround or ignored. So I just assume it’s on my end, take the necessary precautions, and let them figure out on their own if it’s their problem.