Everyone else on here seems to have a happy ending to report. Thats a good thing for them. I, however don't have such a happy ending to my story. This happened to me aboutn 8 years ago and I was ultimately held responsible for ALL charges.
I learned that there were disputable charges happening within 24 hours of having used my card at an American Eagle store at my local mall. It seems that the kids who worked there got my number after I had made a purchase there and they were buying grow lights (presumably for their marijuana plants) with my card number online, and the charges showed up on my statement as 'ABC Farm Supplies'. and because, after about 3 months of dealing with my bank on the issue, I could not prove to their satisfaction that I was not the one who made the charges even though I ultimately ended up flat out inviting them to my house to inspect the premisis for any of the merchandise in question, I was held liable for $500 in charges that were not mine.
And just last year, my dad went to use his debit card at the local grocery store and was declined because, as it turns out, his card number (not his actual card and not hisPIN number) had been used within only minutes in 2 different cities that were from 30 to 400 miles away from where he lives. Though after a 30 day investigation of his claim he was given his money back he was warned that if in fact the bank were not able to catch the guilty party, regardless of proof, he would be held liable for the charges.
As a small business owners we were also told that if the true perpetrators had not been caught (which is sadly too often the case) we would be the next in line to be held responsible regardless of any precaution we may take. You see, banks do not take this sort of thing lightly and without question, someone WILL be held responsible in the end regardless of true guilt. The banks ALWAYS get their money in the end.
My point to all this is that in spite of what others have said on this topic, you should deffinately take this very seriously and stick with the investigation as closely as possible to ensure your desired outcome. No matter what they may say, in the end, your bank doesn't really care as much about you as they do their own bottom line. This is a simple fact in the world of business.
I should add that both experiences that I cited above are with 2 different banks that are not affiliated with each other. Like I said, in today's world, it is simply the way business has to be done. ID theft is all too prevalent and we all need to be VERY diligent.
Good luck with this, as I know just how much it can really suck.