@ZMAN and
@KevinJ: I haven't lost any cards. My CC does have a chip, but these were both on-line charges. Good tip about changing my email password! I have to admit, I am bad about using the same password multiple times, but my bank password was unique.The security question they changed was my mother's maiden name!
@Retired_Engineer: Ideally you should have a separate email account that is only used for financials and nothing else. That way there is no cross contamination. Like for instance sharing your email on social media , or clicking something in the mailbox you know you shouldn't, once you have a clean email theier should be no spam in that box to phish you with. Give it a complicated password thats different than everything else, and change the password monthly, you may may think I'm paranoid, but trust me, most people just dont realize how open they are to being hacked.
Its also very easy to guess the answers to peoples security questions if you can gain access to their facebook. 4951