You also can suspect the Equafax breach. I have cards that never were used get hacked. So many hacks these days you don't know who to blame anymore. Fortunately everytime one of mine was hacked the card company was right on top of it.