re: 76 million chase accounts hacked

I imagine PAN and other account related information is stored on a completely isolated environment from general personal information. That is the best way to do it (for security and audit purposes), and is the only way I can think of that makes those statements true.