Actually may not be SL's fault your card was breached.
I had a similar problem a few years ago with a card I had or nothing but emergencies, never made a single charge on it.
Lo and behold.. I got hit with about $800 in charges for an internet casino. On a card that was never used?
Some places aren't too picky when it comes to CC info and all someone needs is a random number generator. they'll hit a valid card eventually.