That sucks! Good thing you caught it.

Credit seems less secure every day lately. We need legislature that makes the business that 'leaks' your info 100% responsible for all losses. Then they'll stop keeping your info on their unsecured servers without notice they are doing so.
Good luck getting it solved.
I suggest you put a fraud alert on your credit...just go to any of the 3 major credit reporting sites (transunion, esperion, I forget the third) and you can get a 90 day fraud alert that stops people from getting new credit with your info, and calls you if someone tries. It's free, and setting it up on one informs the other two automatically.

There's a possibility that it's not a "rogue site" but rather a malware on your machine sending the information to a 3rd party. Make sure you don't have any questionable addons in your browser, or weird programs installed (check add/remove programs in your control panel).

Lots of stuff are insecured these days.

Well, I did as newtboy suggested and got a 90-day fraud alert from Credit Union. Hope whoever did this only had the card #, nothing more. The credit cards have been turned off and we'll be getting new cards and account #'s..

Hope it is not malware, DH is pretty good at setting up security on our computers but who knows.. I seem to attract malware.. but never anything serious, so far. I have been keeping an eye on my addons since I got a very sticky 'search engine' about a year ago and it took quite a while to get rid of it permanently..

I'll stay alert, try to see if using paypal whenever I can when shopping online, and just wait and see.

Just sucks, but at least I didn't have to pay any of that groupon stuff myself!