Sorry you are going through this! That is horrid.
I had placed an order online at a seed company a year and a half ago. I'm sort of nervous, so never "keep my # on file". Well.. someone hacked into their computer. We got a call from our bank 6mos ago! Thankfully, none of our money was taken, but it took them a YEAR to advise us of the situation and to give us a new card. SCARY.
The whole move away from cash toward credit sort of sets us up for some of this. Not sure I'll be buying anything else online in the near future.
Hope it all gets straightened out. What the heck was the point of sending it to YOUR address?
Meghan