We didn't stay at DVC.....
However, I was just at the World April 17-23 and stayed at Pop Century. My credit card was used at our resort hotel as a deposit and at the Disney owned outlet store (Character Premier--something like that). We used our KTTW to charge anything we wanted, and I had the card in my physical possession at all times.
I only use the card for
Disney vacations, it is the Disney Visa. I don't even carry it the rest of the time, I use my American Express for nearly everything, and this trip I paid cash for most things, didn't even use the Am Ex. When I got home I had a call from the fraud department at Chase. I called them and they advised that someone had used the card for I-tunes and a website called blizzard, which we googled and is a gaming/dungeons & dragons kind of thing. I did waste the time to ask my husband if he charged those items, but as I suspected he did not. The charges totaled less than $50, but clearly Chase knew this was a problem. They cancelled my number and I am still waiting for the reissued card. I was impressed with how quickly the caught the items--they never hit my statement and were in a pending status.
The only other place I "used" my card was at the Disney Visa free photo thing in Epcot--clearly someone wrote down the number.
I don't know who took the number, but sometimes people suck! I can only guess there is any unhappy cast member who now has an extra song and video game--I used to work in banking fraud, and if Chase can get the vendors to comply they can trace the buyer. Especially for copyrighted digital content--I don't know if they will bother for the dollar amount.
I was going to write a letter to Disney to let them know, but clearly this problem not new.