Haven't had it happen to us yet, but it's got me checking my credit card statement online virtually daily.
This is a really serious issue, and it seems to me someone who has been affected already should try to get this information to Guy Booth via some channel other than the customercare e-mail at GlobalPass. (Since, if it goes there, it's likely to get intercepted by the same person(s) who are intercepting and fraudulently using the credit cards numbers.