Any idea how that happened? I have a combined credit/debit card, but debit is chip only so it can't be copied. I can't see how it could be misused except at gunpoint.

Sure ... it was a chip-less Visa debit card. My point is simply because it was routed to a DDA, not a credit line, the typical protections for a credit card don't apply. (This was the US). They are pretty clear about this in the contract. We even found footage of the malefactor checking out of a department store. Live and learn, I guess... This was some years ago. Now, I almost never leave the house with a debit card, and I have all my cards make my phone go bing! when they are used.