I have a question, is someone with the card number and PIN able to cancel an order? For example would it have been possible for the OP to cancel the order then quickly place another order since he knew the card number?
It would probably be possible if they called into customer service. The activity on the codes shows that they were used once and the order was cancelled, and the balances were not credited back. At this point it's just rail birds commenting on the situation that haven't fully read the thread or know the situation.
I saw that you posted a picture where you received an email that says "you" canceled (I believe it has been established that this is just a template) the order, however is there additional information in the email that potentially has more information about that order that can be linked to the cards? For example an order number....