Sorry to hear that, it sucks, same thing happened to me a while back. I found out I got hacked in a similar fashion.

Didn't get any refund. Also, yes, it has happened many times. When it happened to my I dug around the various support forums and saw that its quite a common problem.

Now I don't have a credit card number sitting on my account and if I enter my CC details each time.