There are only 999 possible CVVs and 24-36 possible expiration dates for each valid card number. CC thieves can run thousands of test transactions per hour to find the right combination.
Credit card numbers are pretty low tech.
The first digit is the network:
- 3 - Amex
- 4 - Visa
- 5 - MasterCard
- 6 - Discover
The next five digits are the issuer ID. You can look those up online.
The next nine digits are the actual account number.
Finally, the last digit is a checksum based on the Luhn algorithm
Not saying that's how it happened, but it's possible.
[RIGHT][size=100]- Sapphire Preferred - Freedom - Ink - Platinum - Everyday Preferred -[/size]