WARNING-legit company can still defraud?

jille

I ordered an item on the internet on Sat 14th Jan for £19.99 from a secure, on-line (and actual) camera shop which I had used before. On Mon 16th ,I had a phone call from them to say credit card details had been lost due to computer problems over the week-end. Could I give them again or phone back? Immediately suspicious, I said I would phone later. Went on-line and checked the company and its contact numbers again.They were the same. Phoned back,as order had not been processed and let the person who answered look up my details. He was able to confirm my name, address and order info. I then gave him my card number and security code again as asked, 'though I was uneasy about it, but felt I had done enough to check. On Tues 17th ,item arrived as promised.Also checked my Citicard account online,as I do every few days.Correct amount had been debited.
Fri 20th got a call from Citicard saying they'd cancelled my card as they suspected fraud - had I last used it on the 16th with this camera company?
Card had been debited on the 20th with 4 transactions for almost £1000,which Citicard(who were brilliantly efficient)refunded after I signed forms and filled in details of what I thought had happened.In hindsight, I should have re-ordered on-line,as I am 99.99% sure the guy I spoke to on the phone at the camera shop used,or sold, my details.I have asked Citicard to let me know if they find out who was responsible for the fraud!