It may not have been the restaurant. I had a fraudulent charge for $1200 appear on a Chase card that had never been used even once. I had had the card for a month or two when one day I received an automated call from the Chase fraud department asking about the charge. When I talked to the Chase rep I told her that the card had never once been used and that it was not even registered for online account viewing (in other words, the card number had never ever been on the internet in any way). It was clear to me that this was either an "inside job" or the Chase system itself had been hacked. The importance of what I said was completely lost on the Chase rep and she had no interest in pursuing the matter any further.