Debit card and credit card numbers keep getting stolen

My wife's (no pics) capital one debit card number has been used fraudulently 3 different times this year. The most recent time was yesterday morning. Then today, I notice fraudulent charges on my capital one credit card. Both stored in Amazon and our online banking. Other than that, no common use I can think of. Any ideas of how this could keep happening?

We're not loaning our cards out or anything like that. Seems like more than a coincidence this most recent time.