Unless they are using your account AND your card to 'hack' your account, your account hasn't been hacked.

Most likely you are paying directly through an insecure portal.

I suggest you pay through Paypal. They seem to be secure.