It's happening all over with every business. By the time the security is in place it's obsolete to the crooks. ID thieves are staying one step ahead of the law. If you use a credit card at any local or online business you are in the matrix. Have you ever paid for a people search? Anyone can find out anything about you. A crook can get a list of credit card info cross reference it with a database of legal records and have info needed. After my cards were taken over I started reading what I could about ID theft. Just a quick search of hacker sites online was enough to realize it's too far out of control. Everyone gets the fake charges taken off the cards, new cards issued and it starts all over again.
I have fraud alert and ID protection from the credit reporting sites and that seems to be working the best so far. I get a alert every time a charge is made to any of my registered cards, DH's too. $30 a month.