But it does not mean that it was not used online before that.
Target had biggest CC number leak in history AFAIK. Even I received notification that my credit card 'might be affected', but last time I used credit card with them was 8 years ago and was closed/expired long time ago.
In other words, if your credit card information was kept in some database and that database was leaked, then there are plenty of other options trying to get access to the card. See below
This is VERY serious accusation I doubt is the case. If true DBS might lose baking license.
I do not believe there was/is any case in first world countries when data got leaked from banks. It was always retailers.
Aha, this clarifies a lot. So most likely your previous card number was leaked from some retailer. It was tried to be used immediately, DBS detected and replaced the card.
However, seems crooks were smart as well. Knowing IBAN assignment, they most likely could assume and calculate that only last 4 or 6 digits were changed for every account while billing address would not change. Thy also correctly calculated new card's expiration date based on previous card's expiration date. At the end the only thing they need to do was massive brute force attack. And it apparently worked - they guessed replacement card's number as well.
I do not know what is the best way to handle this situation except to cancel AMEX card altogether and re-apply after 6-9 month.
