I discovered yesterday that the breach was not Renderotica at all. So it's a false alarm.

They have a strange (and nearly fear inducing) way of providing you your purchased downloads,  but beyond that, they seem fine. Using a prepaid card for purchasing is probably still preferrable to be on the safe side.