I can't figure out how they would have gotten the number. I almost never use the card, hasn't been used in 6 months. I usually use it as an ATM card, those receipts don't have the card # on them, and the company said any statements they might have mailed wouldn't have had the card # on them either. It has been in my possession at all times.