That would still constitue a breach. Demonstrating a breach means showing info they should absolutley not have access to.

That said such Irish systems are very imperfect e.g. low wages for IT staff and there was breach/attack of the countries hospitals systems during Covid however the gov acknowledged the attach at the time. So very much possible.

I'd need to see more evidence before I'd take this claim seriously though.

Advanced Fraud Protection on the Apple Card for the CC number you type into websites changes the CVC ("three digit security code") randomly at regular intervals (I think it is at least weekly?). Also that CC number is "virtual" in that it is different than the CC number Apple Pay uses in NFC transactions and if you have the physical card different from the CC number in the magnetic stripe and different from the CC number in the EMV chip for EMV transactions. (You can't even get a CVC for any of those other numbers, so can't type them into random websites.) The entire virtual, typable CC number can also be rotated to a new CC number manually with mostly just a "button press".

Some other high end cards have also been learning from Apple Card here and moving to virtual numbers.

So far, I've seen no real downside to Apple's approach to virtual numbers and the Advanced Fraud Protection CVC rotation (which just starts to feel like a 2FA TOTP for card purchases online the way you check for the latest value after Face ID check from the app every time), and it was definitely one of the factors why I wound up signing up for Apple Card in the first place. Hopefully more of the low end cards and mainstream banks pick up the added protections, too.

privacy.com is that for CCs.

fastmail has masked email and I use that pretty regularly which can do the same thing. It also apparently integrates well with existing password managers like 1password and bitwarden. I haven't used that feature myself, but maybe it would work well enough for you.