Its my understanding that Visa / Mastercard will protect non pin based debit transactions (since they are really credit transactions). ACH is a different beast, from what it sounded like when reading the article, Balanced is somehow determining account numbers / routing numbers from bank accounts, which would be bad if they got hacked. On the other hand, they could just be issuing refunds to the cards.