If credit card information is leaked, the bank should be held responsible. If a bank violates its confidentiality obligations, the other party may require it to take remedial measures or compensate for losses and other breach of contract liabilities. If information is illegally leaked, if the circumstances are serious, it may also constitute the crime of infringement of citizens' personal information.

Legal Basis

Article 577 of the "People's Republic of China and Civil Code"

One party fails to perform its contractual obligations or fails to perform its contractual obligations. If it complies with the agreement, it shall bear the liability for breach of contract such as continuing to perform, taking remedial measures or compensating for losses.

Article 253-1 of the "Criminal Law of the People's Republic of China"

Violating relevant national regulations, selling or providing citizens' personal information to others, if the circumstances are serious , shall be sentenced to fixed-term imprisonment of not more than three years or criminal detention, and shall also or solely be fined; if the circumstances are particularly serious, shall be sentenced to fixed-term imprisonment of not less than three years and not more than seven years, and shall also be fined. Anyone who violates relevant national regulations by selling or providing citizens’ personal information obtained in the course of performing duties or providing services to others shall be severely punished in accordance with the provisions of the preceding paragraph. Anyone who steals or illegally obtains citizens’ personal information through other methods shall be punished in accordance with the provisions of paragraph 1. If a unit commits the crimes in the preceding three paragraphs, the unit shall be fined, and the persons directly in charge and other directly responsible persons shall be punished in accordance with the provisions of the respective paragraphs.