Your card details will have been compromised at some point in time.
Freeze your card and order a replacement using the stolen option.
As for how this could happen, either a scam delivery fee email/text, buying something from an untrusted website, buying from links via social media adverts, historically using Lyca mobile as your phone provider. Many ways.
But it’s important to freeze the card and replace it.