Well, what you can do is notify the card issuer about those cards that went through, so they can mark them as stolen. That surely will make the hacker really happy, and discourage them of doing it again :)

So you mean you are keeping full card numbers somewhere in your logs to... fix some potential security issue...?