Storing the final digits complies with the CC requirements, to my knowledge. I mean, every online store happily shows me my final four digits. So it could just be confusion about what they mean.

Having said that, Ashley Madison has approximately zero credibility, so whatever their agents say is open to intense skepticism.