That sucks, really
Two stories came into my mind. One is that everyone arguing about Vistaprint, that they put shady transactions on your credit - I used my card about 200 times with them, no problem at all, thank God.
The second is a method what romanians do in Hungary. They hack ATMs and copy cards used for cash withdrawal, they also setup spy cams to catch pin codes. So they copy the card and go to Timisoara, Tirgu Mures, Arad etc. and withdraw cash in 100 romanian lei portions (~30 USD) and just the charges on that is about 6-7 USD or so - until they can do it, they do it and getting rich. They do this with 20-30 cards at a time, and romanian ATMs are not declining any of these.
Anyways, the hungarian cardholder will get informed the best way by the issuing bank. The not so best way is by the monthly statement, or at the groceries when they can't pay as there are no more money on it. To cut the long story short, the cardholder should dispute the transactions one by one at the police then at the bank. Then hopefully the amounts will come back to the account in 3-4 days, if not so lucky - in the allowed max 185 business days (more like 210 calendar days or so...)
It is a pain, my ex went trough this. She thought she lost all her savings of 4000$, but thankfully the bank charged the amount back in advance in full - as I pointed out at them their TOS
Sorry if I was long and boring, it was not my intention.