Yikes; glad it got corrected.
Haven't had that happen to me in many years.
One rep told me that it's just dumb luck that a crook will hit on a #, but how they'd get the expiration & security code must REALLY be luck.