This indictment [1] seems to suggest an Indian payment processor was compromised, whose name "is known".

[1] : http://cbsnewyork.files.wordpress.com/2013/05/lajud-13-cr-02...