If you have access to the cards, you have access to the information stored on the chips. It’s not exactly rocket science.
That said, the banks are usually going to eat the fraud. Unless you have evidence of the person using the card/information they will not prosecute. The dollar amounts and time it takes to do so—in various states—is not worth the effort. They have had accountants and actuaries figure all of this stuff.
If you are not getting reimbursed from the bank, contact your State’s banking control office or Attorney General. They deal with this stuff every day. Most banks will eventually eat it and put it back in your account.
Whomever the victim was, tell them to ignore any emails or phone calls in the future. If a branch calls, tell them to GO to the branch.
I’ve worked in banks and had accounts at banks and they have NEVER called me about any data breaches. If it doesn’t make sense, do believe it. These fraudsters will go after the elderly or misinformed. Fortunately, banks are used to this and should recover quickly.
Yeah, they did reimburse the full amount, and a police report was filed. See also my post 13.