I wouldn't assume that it happened there, anymore than anywhere else. Your CC information can be taken by skimmers at the gas station or ATM, or a dishonest server or clerk at in person at a brick and mortar establishment. That is why I have a CC, and do not use my debit card. If someone racks up fraudulent charges on my CC, it is a pain in the butt, but they do not have MY money. While I do take precautions, in the grand scheme of things, it is pretty low on my list of things to worry about.