In both breaches of MyPillow and Amerisleep, the customers whose payment information was potentially stolen were not informed.
Source: Threadpost