I just had my debit card hacked two weeks ago. Shortly after being notified by ATT about the data breach. Now I have to wait for the bank to conclude a fraud investigation before they can credit back over $200 to my account. 😣
The same happened to my BIL 6 months ago. The bank noticed when $5,000 was transferred to an undisclosed recipient. Fortunately, they stopped the transfer. Like you, however, the 5k was held by the bank for two weeks until the investigation concluded. They said that the online account was hacked on the bank side, not on the public side.
Local bank manager was very helpful.
You were luck it was only $200.
Mine was several thousand dollars, primarily in auto parts and tools purchased in Tennessee.
It happened on my replacement card, which AT&T updated, and then a third time as AT&T kept leaking it. They offered me free credit checks for a year...