I had my card used fraudulently a few weeks ago although I am really on the ball with security. I got this email today, so it is probably the culprit. Luckily I use unique email addresses and password for all my online accounts so I should be safe. I am at least glad I have a good idea where my card details were obtained.
Biting the hand that feeds IT
