Same here. Years ago had transferred a balance to a card and it sat on my desk unused. I later got a fraud alert because the account was being used for small purchases on the other side of the country. Total inside job.
Five years later I got a call from AMEX about an attempt to charge a large hotel bill on that card. The fraudsters had all of my personal identifying data. The only security flag was that the card had never been used in five years. And of course, I was not in the city where the charge attempt took place.
The security department thanked me for taking their call and declined the charges.
Total inside job. Some clerk at AMEX must have sold a list to the fraudsters.
I cancelled that card, and every other card I was not using.