Infinia compromised on trip

Hi all - needed some insights and advice.

I am currently traveling in Malaysia. Spent a few days in KL, currently in Penang. About 12 hrs ago, my HDFC Infinia card details were compromised and multiple online transactions started occurring (at 3am my time). Card is with me, so obviously card details were leaked somehow. I got alerted by multiple messages and calls from transaction monitoring (first automated, then from executive). Total amounts over multiple transactions amounting to around Rs77k. I perma blocked the card on the app (full deactivation and reissue). As of this morning, I am still getting notifications and OTPs that someone is trying to use the card.

I am extremely careful with my card. I set limits on the app, don't hand it to just anyone, don't use it on ATMs. Used it on grab (in the app, not handed to cab drivers), at two hotels (forced to hand over for deposits) and used tap to pay at merchant POS machines only.

1 - How did the card details get compromised? Any thoughts pls?

2 - Normally, for suspicious transactions, I get a call - I have to say Yes or No. Even without me answering multiple calls (I was alseep), how/why did the transactions go through?

3 - Even after blocking, one transaction still went through. Strange.

4 - I have spoken twice to executives, raised disputes and fraud on all the fraud transactions in the app. Anyone has experience with this? Resolution timelines, protection offered by HDFC Infinia and so on? What can I expect?

Thank you.