Thats awful!

Thanks for letting me know in future, with the DPA they can give away your name and address but not card details, thats illegal.
I hope you take this a lot further and make sure something gets done about it, as its terrible them taking that amount of money out.