Can I also make a PSA for being scammed?

After reading another PSA about bank cards being scammed, I checked my account and sure enough, someone is having a great time tonight after stealing over $300 from my debit card and buying alcohol through an Auckland alcohol delivery service. Also their testing method is by buying a couple of cheap mobile top ups before going in for the big steal. So obviously if you happen to see a random charge that you might question at first, just block your card. It's just as easy to unblock the card once you've figured out if the charge is legit or not.

And yes I blocked my card as soon as I saw the charges.

Also can someone ELI5 how someone else was able to get all of my card details? I buy online quite a bit but from legit sites. Could this be because of all the cyber attacks we've been having lately? I'm with KiwiBank and haven't been aware of them being affected. Obviously I'm going to be ordering a new card once I've got this cleared up but how can I better protect myself in the future from this?

Stay safe.

Edit: Called the bank, they canceled the payments, but have to wait for the fraud department to look into it to get my money bank. Also had to file a police report but that was pretty easy through calling 105.