It may not have been the restaurant. I had a fraudulent charge for $1200 appear on a Chase card that had never been used even once. I had had the card for a month or two when one day I received an automated call from the Chase fraud department asking about the charge. When I talked to the Chase rep I told her that the card had never once been used and that it was not even registered for online account viewing (in other words, the card number had never ever been on the internet in any way). It was clear to me that this was either an "inside job" or the Chase system itself had been hacked. The importance of what I said was completely lost on the Chase rep and she had no interest in pursuing the matter any further.

I didn't get a call or anything but did receive in the mail yesterday a new Citigold debit card. Included was a letter talking about how a merchant might have compromised a number of credit cards just like the OP's posting. Interesting since I never use my Citigold debit for any transaction other than as an ATM card (and so far only at Citibank bank locations)