Blame game begins... someone told Times that Apple does not push more detailed information!

Take a step back, Card Member (number/PAN) verification, authentically and registration is a issuer process NOT Apple Pay. If they want more information, Apple iTunes can likely transmit that information since all that data is stored. Issuers need to take responsibility for using Green Path or even an not-so-effective "Yellow Path".
Issuers need to address the simple risk question "What is amiss in the process for registering a card, that will make them effective against such attacks?" And not all Issuers are impacted, some have been a lot more prudent... which brings me to reconsider banking or using services from such Issuers, that have weak Fraud and Risk management measures leading to 'authentication of fraudulent cards'! Issues understand that once registered the LIABILITY of the transaction is covered by Issuer... change the process now to make it more effective.

Read my blog on this issue at http://sco.lt/71auv3 dated March 10 and previously stated in end-Jan.