Well, that's one possibility

http://www.mercurynews.com/breaking-news/ci_19480051

So apparently my local supermarket chain Lucky's had their self-checkout kiosks tampered with. I think that's probably how my credit cards were cloned...