Last 4 digits are sent to store admin thus it's not stored in database.

No Core hacks
Standard Vm Plugin

Configure order statuses for removing the credit card detail in payment plugin config page.

Last 4 digits are masked in order detail, n emailed to store owner