Happened to me a year or two back. I purchased something on-line, from a trusted and very reputable outlet, and then my bank account was emptied!
It was more than coincidence, I think, that my Bank were the people installing a new purchasing system at the outlet at the time, and a delivery address used for one of the fraudulent transactions, via China, just happened to be in the same city as the Bank's systems base!
It took over a month to sort things out, changing debit cards, passwords etc, and getting my money back!