The attacker had access to the database which included your real life name and contact info, and encrypted payment informtion. While it's conceivable that the attacker could have found a way to break the encryption on the payment information, it's unlikely. However, to be absolutely certain you could decide to alert your credit card company.
So if my credit card has been compromised its my problem even though its due to LL?
Ok, at the end of the day its my credit card and yes of course I'll inform them. But I'll be informing them that LL have not taken appropriate care and responsibility of the data that I gave them. This is paramount to negligence on LL's part.