Just got back from 4 months in France and my card details have been used on an online gaming site 16 times last week. I am so annoyed as my other card was cloned the week before we went. I asked the guy in fraud how they do it as my card has not left my sight and he told me its from using the card for on-line transactions. Some companies hold your details and its when they get hacked the info gets pinched. Do they have a right to store all our info without asking? I haven't used my card online since I left in May. He suggested paying via Paypal is a better option but I hate paypal, they are a nightmare to deal with if things go wrong. They are refunding me in full but it means a new card will have to be sent and more forms to fill in. I suppose I should be grateful I am back in the UK as it was easier to sort than if I had still been abroad.