Hackers stole up to 1.5 million credit card customers' numbers from Global Payments, in the latest illustration of payments systems' vulnerabilities.