I had not used the cards in the past year.
But it does not mean that it was not used online before that.
Target had biggest CC number leak in history AFAIK. Even I received notification that my credit card 'might be affected', but last time I used credit card with them was 8 years ago and was closed/expired long time ago.
In other words, if your credit card information was kept in some database and that database was leaked, then there are plenty of other options trying to get access to the card. See below
In fact, I hadnt even activated one of them. The leak should be from dbs side and only pertaining to the Amex cards.
This is VERY serious accusation I doubt is the case. If true DBS might lose baking license.
I do not believe there was/is any case in first world countries when data got leaked from banks. It was always retailers.
That is not the first time my dbs amex card had been compromised. It had happened more than a year ago and the current card had been the replacement and with a different card number. And I hadnt used it yet.....
Aha, this clarifies a lot. So most likely your previous card number was leaked from some retailer. It was tried to be used immediately, DBS detected and replaced the card.
However, seems crooks were smart as well. Knowing IBAN assignment, they most likely could assume and calculate that only last 4 or 6 digits were changed for every account while billing address would not change. Thy also correctly calculated new card's expiration date based on previous card's expiration date. At the end the only thing they need to do was massive brute force attack. And it apparently worked - they guessed replacement card's number as well.
I do not know what is the best way to handle this situation except to cancel AMEX card altogether and re-apply after 6-9 month.