My daughter's friend just had his card used a couple of weeks ago. He seldom uses this card, so was able to track it back to a restaurant, and they caught the girl who works the cash register. She apparently had written down his card number, and the 3 digit code on back. I've not known anyone personally who has had it happen through online purchases.
I'm glad the bank so quickly agreed to reimburse you! :D