I got caught only last week
Give them their due, the HSBC identified all the payments as fraudulent and stopped them. They phoned me last Saturday to tell me what had happened, and that they were sending me a new card.
Strangely I hadn't used my card for a few months, then Friday night somebody used it to try joining an online dating agency in the states, then tried to buy a load of electronics, also in the states.
When I was travelling for work up to 3yrs ago, I used my card in some very dodgy parts of the world nearly every week and didn't get caught.
I'll never know how the info leaked out, or when.