Yeah. This is the 4th or 5th time I've had this sort of thing, and I'm quite sure it's all related to online shopping (specifically vaping purchases) because it never seems to happen to the card I generally only use for "real world" (swiped) purchases. BofA has a Shop Safe option that I generally find too much of a hassle to bother with, but I think after this, I will be more conscientious about using it. It actually seems like a really good service, I just get lazy and don't do it. If any of you use BofA credit cards for your purchases, and haven't looked into it, here's how Shop Safe works: When you want to buy something, you log into your online banking for that card account, then click on Shop Safe. It will ask you for your code from the back of your card, and maybe expiration date (I don't remember, since I've been so lazy about using it!). But then you can set a dollar limit and expiration and it will generate a card number and security code that can ONLY BE USED FOR THAT VENDOR. So, even if I were to set a fairly high limit, like $300 or something, and maybe a 6 month expiration, if that transaction was compromised, they could only use that card number for purchases at Ahlusion (or whatever vendor I used it for). And I don't think that's what most credit card fraudsters are going for. They aren't trying to get some "free" Boba Tea or Strawberry Shortcake, they're trying to divert funds from 100,000 people into a fictitious company.
Anyway, I will definitely less lazy about using it! I think if I know I will be purchasing multiple times from a single vendor, like Ahlusion, I will go ahead and set up a higher limit with a longer expiration, and then maybe it won't seem like such a hassle every time.
Thank you for clarifying the date for me. 
