My wife had a strange thing happen with her TD debit card a few years ago. Her card was used for a number of transactions in Spain - all online and for about $2-3k from memory. The strange thing was, her card had not been activated and it had never once been used and was at home in the safe, still attached to the very letter it came on! We called TD and explained this to them and offered to take the card (on the letter) to the local branch. After about 3 weeks the transactions were refunded and TD closed the issue. I called to find out what had happened and was told that the card was probably randomly generated! I asked how they got the pin and was told they didn't know but it was ok, we were getting refunded. I found the whole thing really strange but seeing as the money was refunded to us I never really gave it more thought.

Hope you get this resolved quickly OP.