My Citi credit card got skimmed somehow, somewhere, in Greece.
Had only used it online for travel purchases before going to Greece (ferry tickets, and a couple of Viator day tours), and for a couple of domestic direct debits. Then I took it to Greece, and only used it at supermarkets, some official attractions (old historic stuff), and petrol stations.
A few weeks into the trip - within 5 minutes I get a couple of SMSes with codes for $1300 transactions while I'm on a hike (said it was from the same vendor - some European energy company, apparently), followed by a $10 Zara online transaction that got automatically blocked by Citi - who pulled the plug on the card.
No damage done - none of the transactions went through thankfully. But still, could you believe there's someone shonky in Athens or Crete?