It's probably not via the internet that you've been compromised.
I'll hazard a guess and suggest your card's been cloned whilst in a restaurant, or while buying petrol.
A few people got done recently in my local ... the barmaid was passing on the dets to her boyfriend
