Credit and debit cards are not as secure as banks pretend them to be. Chips can be cloned with a cheap device sold in the black market (this is known as “skimming”). PINs can be easily stolen simply by eavesdropping.
My personal opinion: A business you frequent has been constantly skimming credit and debit cards. If you give your card to any salesperson and lose sight of it, the probability of it getting skimmed is pretty high.
NEVER give out your card. Ask for the salespeople to give you the terminal and scan it yourself.
Other than that, change your passwords, and NEVER reuse them.
EDIT: As others have said, NEVER EVER use your debit cards on the internet. Ask if your credit card company provides virtual credit cards (which require you to use a phone app to authorize every transaction). If not, choose another company.