@RaceProUK said:
Subscription payments.
Yes, I know about Direct Debit. No, not everyone uses them.
Where I work, that's exactly the case - some customers refuse to go on Direct Debit, or later decide they don't want us doing it (but are happy to give their debit card details which takes money from the same damn account!)
Visa/MC/Banks do sue companies for breaches as all card merchants have to be PCI Compliant, which means certain standards have to be followed (I'm not saying the standards are good or infallible by any means, it's just that's the standards we have to follow), and if card details are lost, and it turns out any one of those standards isn't met, it's time to pray you've got enough money to pay the fine...