This isn't employee theft.
The type of theft in this article is actual theft from the company (cash, merchandise, etc.).
Credit card theft/fraud by an employee is minuscule at this point, especially with point of sale terminals that allow the customer to accomplish the transaction without any input from the employee.
It's more likely that the point of sale terminal is compromised.
Cybercriminals increasingly target point of sales systems
Weak Remote Access Practices Contributed to Nearly All PoS Breaches: Trustwave | SecurityWeek.Com
New Global Security Report Highlights Rise Of Malware-as-a-Service
?,28% theft from employees from 40 odd billion in total losses is 11 billion dollars or so.
Data base breaches due to shear volume are number one in terms of individual
accounts that 'may' be affected. You also have to have the resources to vet any data.
You pay pennies per name in the hopes you can get a return. Hopefully a good return.
One certainly doesn't get a list with a million names on it and charges against all
of them. Data must be analysed to determine the current status of the account information,
the amount of credit or monies available,expected security level used for purchases and
other things such as how many accounts can you breach before the gig is up. You could
just randomly choose accounts also. Just because there was a breach compromising
millions of customer accounts does not mean millions will have charges against their
accounts. The shear logistics would make it impossible to conceal your tracks.
Only a very small percentage would be affected by any actual fraud. Out right
theft still accounts for more loss than CC fraud. Fraud is not the only reason for
data breaches. Analyzing a customer data base can give a competitor insight
as to how to acquire that customer base for ones self. Exposing a competitors
security lapse can give you an advantage.
Don't get me wrong CC fraud is growing and will likely someday be the number
one loss category. However in my neighborhood your more likely to get robbed
of your cards than have fraudulent charges due to a breach. My main point is I
personally am not going to get my undies in a bunch because a vendor had a
security breach for whatever reason. It's more likely to happen sooner or later
as not. The important thing is every one does their part. Report fraud immediately
through the proper channels.

Regards
Mike