I had a very similar experience several months ago and I'm still cleaning up the odd e-mail subscription. The would-be thief only placed a single order at Costco.com, and I didn't get a delivery address.

My suspicion was that my card was compromised at a local restaurant near JHU APL, but I have no evidence.