I never thought of this before, but the first 4 digits of my credit card number revealing the issuing bank seems insecure to me. That's not a fault of the op's program, of course.