You don't have any defense. Barring a legal notice and then pursuing that all your data is removed from their system (which itself would be questionable, since they would need to have your data on file for their audit and information archival purposes), there is nothing you can do about it.
I’ve used my credit card at stores like Target and Walgreens—what is the best way to ensure they remove my card number so it’s not exposed in a data breach?
Online Retail: How should a new website with no brand recognition address customer security concerns?1 ansHow can a system protect against password guessing attacks, and how do banks stop repeated PIN guessing on stolen cards?1 ansOnline Payment Gateways and Processing: How easy or hard would it be to steal swiped data from Square or the new PayPal Here devices?1 ansHow difficult would it be to skim card data from Square or PayPal Here devices?1 ans