Why would I care if my credit card information gets taken? If there's a fraudulent charge, I don't have to pay for it. Therefore, I have no financial incentive to take my business elsewhere or otherwise care about security.
The cost is borne somewhere (likely in the % fee credit cards charge merchants), but individual users have no incentive to care about it.
The cost is borne somewhere (likely in the % fee credit cards charge merchants), but individual users have no incentive to care about it.