The first step to take is to call your bank and have your account locked. You must then try and find out what purchases have been made, and where your information could have possibly been hacked. This information should be then sent to the police. They can either track down the theif irl or online.
