...I recently had my credit card details stolen...
I doubt that would be a computer hack job - more likely your card was illegally swiped at some restaurant somewhere when you last gave the card to a waitress, or someone found a credit card statement in your trashcan...
As to the grc site it is quite good. I don't think you need worry too much about VectorLinux. VL has very few ports open to the outside world. Less than many other distros. If you don't use Samba you should close those down otherwise VL is pretty tight. Go to VASM, SUPER, SERVICE, SRVSET, 4 and close out any services you do not use.