Apparently, you have your credit card details on file on an untrusted website. Now, two possibilities of how this happened:
1) Either the people who work on the untrusted website have used your card.
2) A hacker (could be anywhere in the world) who was able to download the file which has your credit card record from a poorly protected website.
The only thing you can do now is to cancel your card immediately since your card details are now exposed and will be used again for sure.
In the future, please be safe and never deal with untrusted websites.
I would also choose a bank that really cares, like HSBC.
Apparently, you have your credit card details on file on an untrusted website. Now, two possibilities of how this happened:
1) Either the people who work on the untrusted website have used your card.
2) A hacker (could be anywhere in the world) who was able to download the file which has your credit card record from a poorly protected website.
The only thing you can do now is to cancel your card immediately since your card details are now exposed and will be used again for sure.
In the future, please be safe and never deal with untrusted websites.
I would also choose a bank that really cares, like HSBC.