The compromise of the credit card sounds more feasible.

Just because you haven't personally used the card in 4 moths doesn't mean it wasn't compromised. It is very often that a card being compromised isn't used for months after the information is stolen.