Debit card, I was staying with my fiance and one of their roommates snagged the info. I never left my wallet unattended even to go to the bathroom because the people living there are pretty disreputable so it had to have been contactless. Started getting small charges from bodegas and the landlord found receipts in the dudes room with my info on them for stuff I didn't buy. Did a little research and apparently it's possible to scan from 10 ft away then clone the info onto a blank card so you can physically use it.