Just curious, was it a bank ATM or one of those independent ones? Its fairly easy to lift numbers off ATMS.

A lot of theft occurs beyond the actual business location. Employees of the merchant services (the credit card transaction processor) sell huge blocks of card numbers/customer data. (I used to work at a bank with a merchant services division)