The was the only weird charge I saw, so I called my credit card company and got new cards and they took the charge off.
Then I'm hanging out at home Saturday night and I got a call from some 1-800 number that I didn't recognize, so I didn't answer, but the call 30 minutes later from the same number I did answer because they apparently really wanted to get hold of me. It was a Chase automated line, asking me to "verify activity". I hung up, went online and logged in, and there was $100 to an insurance company, $200 to not-my-cable-company, $80 to walgreens, and a warning message asking me to call them.
At least they caught it early, they said the number was used at the walgreens website something like 12 times and only one of the charges went through, so that was nice.
I'm still questioning though... I thought "billing" and "shipping" addresses were kinda supposed to match when you buy something online? Can anyone just use any credit card for anything? Because that's what it feels like.
And how the hell is my number getting out twice in a few months? Just a coincidence? I don't use this card for anything automatic... I have another card for that, and it's managed to not get stolen in years. In both these cases, my cards were still in my possession.
thank goodness credit card companies are cool about this and just remove whatever you tell them.