Payment card gateway provider hacked five years ago