Quote Originally Posted by Grant H. View Post
That's what I get for skimming the quoted email...
You hit the nail on the head. Probably a CC skimmer on the e-commerce site. Look up Magecart. If not this then, likely something similar. That's how they know the dates so accurately.