OP, do you use this card over the internet?
Sure, it's not used very much in-person honestly. Other than the gas station. There are so many data breaches at different institutions it's almost impossible to know how it happened. And the bank doesn't care because they make the merchant pay for it (at least I believe). I always say I'm willing to prosecute, but that's never happened.