Originally Posted by f4rrest

Seems like much speculation. Just because someone "last purchased online at shop X" and then had some other online charges doesn't mean their details were obtained via shop X. Often, online fraud begins offline. It's just as likely that the local gas station or restaurant didn't properly guard your details -- or that you tossed out some details in the trash. Those merchants don't deserve this kind of trashing without proof.