I got a text today saying that a transaction had gone through that they felt was fraudulent and to call them.
Spoke to them and not only today's transaction £160 in Aldi (online) and £220 on Le Creuset in April (first I heard of it) were highlighted.
So they've cancelled the card.
She said I can't check transactions as card is now cancelled.
She asked whether I've saved card details on any websites (I have) and whether I've anti-virus protection (I don't know whether I have or not).
I also use two other cards online.
What should I be doing now? And how the fuck did the bastards hack my account?