venuscat

It's more likely a hack programmed into the card reader than staff.
That's terrible that you have both been hacked/compromised.
Glad you are on top of things, as are the banks and police.