AG Skin Care Credit card fraud - how did they get my number? Chatsworth, California

I was charged for three items, two from this company, all in one day. A call from another company alerted me. I had never heard of either of them. The one that called said I had ordered something called Blue Sky, couldn't hear the company name. When I called my credit card company, I was told about the other two.

I got my card cancelled, but what worries me is how they got my number? I don't order much from the Internet, and always use well-know companies, PayPal if available.

The email address provided on the invoice doesn't work - big surprise.