I have NEVER been asked anything about Credit Card digits (Last four) and I have recalled 100+ accounts.
The ONLY time they ask for CD-KEY is when the SA is wrong.
You don't ever say your email was hacked, you just say you want to change it. I have had them ask why I can't do it online, and I just say that my old one was closed.