Credit card got hacked.

[LS short box]

Yesterday my wife said I have a package from Amazon Prime. I said that was odd since I have never used Amazon for anything Opened up the package and it was a bunch of weird stuff billed at $71.31. No packing slip inside. Just my name name and address on the box.
So I went online with with my bank I could see I had a charge for a Amazon Prime membership and the charge above. We contacted the bank and cancelled the credit card. The card was used only for my car projects. New card on the way. We also filed a fraud alert and denied the charges from Amazon.
I'm guessing that one of the vendors I've bought parts from lately has a problem with security.
Need an opinion. Is a person better off security wise ordering online compared to calling vendor and giving them your credit card number?
When I order parts I use our home PC that has a pretty good level of security. I never order anything off my phone or laptop.