I have a question, is someone with the card number and PIN able to cancel an order? For example would it have been possible for the OP to cancel the order then quickly place another order since he knew the card number?
It would probably be possible if they called into customer service. The activity on the codes shows that they were used once and the order was cancelled, and the balances were not credited back. At this point it's just rail birds commenting on the situation that haven't fully read the thread or know the situation.