I had 37 baht taken out on the 9th five times at 02:00. I called the bank they asked if I play games. Canceled my cards and have to pay for new one.
I made a bank insurance laim last year under the banks card insurance and the insurance/ bank send me an email and attached was two spread sheets of customer names with their debit card number and expire dates. So go figure.
It's not just Thailand 5 years ago I had £60k taken out of my Natwest UK account in small amounts over three months and that was refunded within 24hrs