As for AHS loosing your debit information, where did you get your information from that AHS actually lost it? I don't think it was "lost", but rather it was stolen. And more importantly, it was not necessarily stolen from AHS, but more likely from the credit card processor (which is where quite a bit of "unresolved" fraud happens). I say "unresolved" because to the consumer, it is the merchants fault and there is nothing the merchant can really do to change that perception. To the merchant, they did everything that they were supposed to do. A company that was paid my the merchant to be secure with the processing of the charges screwed up. I understand, as stated earlier in this thread, the consumer does not seperate the 2 services (merchant & processor) so it is impossible to really "resolve" the feelings in regards to who is responsible for what happened.
I believe Forrest when he says that he has done the investigating, and still went ahead and made changes to the website security, internal store procedures and switched merchant providers. His investagation did not reveal that the breach happed at the store level, but more likely at the processor level. What more can he do?