I understand that that is not the focus of this article but it would be nice to know at least a little bit. Like, did they skim a card? Perform some kind of online system hijacking?

It really makes a difference of who would be at fault here.