That's probably not good. Getting a new card every few years lowers your exposure to fraud, as it's just a matter of time before it ends up in a card dump. The whole system is pretty terrible, but limiting the window during which fraud can occur for your card is a small mitigation.
Any time card fraud is detected & confirmed, or reported by you, you get a new number.
Consider yourself lucky.
Though the issuer may or may not invalidate tokens issued against the old card, and so your unwanted subscriptions often continue forever.