Someone made an order on my account?

Today I got an email saying there was an order from my account totalling about $300, I immediately logged in and cancelled the orders (2 of them). The card they used had my legal name but was not my card. Very confusing.

I contacted Walmart customer service and all they said was that I should put on two factor authentication and then change my password. They said I’d receive a call from some sort of fraud investigation team?

Has this happened to anyone else?