No credit card required
Browse credit cards from a variety of issuers to see if there's a better card for you.
You need to know what the date of service was.
If not on your CR I would PIF the OC using the restrictive endorsement.
If it is reported on your CR PIF the OC using the restrictive endoresment and then start the HIPAA process OR
Start the process and PIF the OC using the restrictive endoresment.
Do not talk to the CA.