Credit card data is stolen all the time. Card skimmers, cell phones, cameras, just writing it down while working somewhere, pulled out of compromised email accounts, etc etc the list goes on. Criminals then upload them and sell that data online.