From the same site just four days later, Rakuten's response:
http://consumerist.com/2013/06/10/ra...ery-seriously/
They are and have been PCI-compliant but only recently implemented tokens. I thought that tokens were required for PCI but I guess not.