For my case, it was almost certain. As it happened single day, the card i use was a virtual card only used in couple big ecommerce websites etc.

If it was leaked somewhere else, i think they wouldn't bother logging in some unrelated account of mine in an ecommerce website.