Ok...that makes it sound kind of worse than it actually is... But someone got a hold of my debit card number, address, and home phone number, made a bogus email account, and bought something from Rapidshare via PayPal for about $10.
So when I looked at my account statement online, there was a charge to PayPal from mid-August. I have NEVER given that particular card number to PayPal.
The PayPal person I talked to on the phone was actually pretty helpful, but he recommended that I get a new debit card...so now I have to get a hold of my bank and do that, which really really sucks.