I was hacked too, just a couple of weeks ago!! It was my first hacking, and boy was I mad! I had just set up something with my Paypal account, and the next day the hacking occurred, so I thought it was through there. So, I wrote to Paypal, to my bank, to the company that I had set up through Paypal, AND to the company whose name showed up on my bank account. It looked exactly like what I had heard here - a tiny transaction to see that the card worked, then they cleaned out my account. Fortunately, it was a very small account, so they only got $50.
On Monday morning, I called my bank and my debit card was cancelled for that account. The bank said that it looked like the card was hacked, not the account, so Paypal was off the hook. The company I had set it up for was off the hook, too. I actually received an email from the company that stole the money!! It's a video game company based in Prague.(Google is my friend!) They said that it looked like I was the victim of fraud, and would I email them the lines from my bank statement that reflected the fraud. So I emailed them those 2 lines. The next day I received another email from the company, saying that my money would be refunded!
On Thursday, the money was back in my bank account. Whew. Then Friday I received a paper letter from another large company, saying that they'd been hacked and 'someone may have accessed your debit card information, including the security code', and the letter listed all of the companies that were under them, and yes, I had bought something through one of them! But that card is no longer valid, and the problem is over. I was refunded!
For the record, I got this idea from a bank, since I did not have a credit card at the time: Open a 2nd checking account at your same bank(mine let me have it for free), one that only you access and that does *not* have a direct deposit to it. Use this account for only online transactions. So, when I pay bills online, I move money into that account for the bills, then pay the bills. That's how the guy only got $50, and didn't wipe out my entire bank account, which would have been devastating.