Have you claimed your money back through CC chargeback? Also all a company needs is the long number on the front name on card and expiry to make a charge. The 3 digit ccv number on back isnt essential so think back to who you may have given such info to. From that screenshot malware bytes hasnt picked up a keylogger that i can see..I suspect a phising scam where the toolbar may have redirected you to a spoof website where you have put your card details in.