I do agree that hackers are lazy but I doubt that they will do all the trouble of hacking your wireless network just to get your credit card transaction. Unless they targeted and they know you have a big credit balance. Not to mentioned that it will take a high end spec computer to actually crack the WPA.....not that im saying its impossible it can be done but it will take more than an average guy to do it, so its not worth it....
I think this is more likely caused by the sites having an unsecured session on credit transaction....and for paypal there are a lot of email spam that will force you to login to their site thinking it was paypal but its actually a hack site....
So lesson for the say, know the site that we buy from and make sure the site is what we think it is