That is really bad news. Of course they don't want to you to name them publicly, then they will have to fix it. A financial company refusing to deal with a security issue that exposes a full last name, credit card numbers\code, gps location, and store deserves to be named and publicly shamed. Bad publicity is often times the only reason companies fix problems like this.

Please post their name for the customers sake. A different account asking a question about the company would be one way to do it indirectly.