hell in a handbasket

Someone somehow got access to my business credit card number and used it to mail order 400$ worth of chrystal. This credit card has not left my possession for one minute since I got it.
Luckily, the company which has issued this credit is not holding me liable, and I have placed the appropriate alerts on my credit report, which needs to stay pristine. Also noted: in today's mail I got a letter from some security company letting me know that data associated with one of my personal bank accounts has been hijacked by a rogue employee and thusly sold to direct marketers.
I need some cloak and dagger, here, people.