Credit card info was encrypted. User information was not. I'm guessing that's the difference.