How is this Possible? (Bank Fraud; Vanity)

Sequence of events: 1. last October, a report was filed with JPM Chase that a customer's contact info was compromised after someone called pretending to be from Chase, and spoofing one of their branch phone numbers - supposedly, a note was placed on the account as a flag. 2. late last month the customer's debit card info was stolen; the debit card is ONLY ever used at two specific Chase branches, and ATMs (and is otherwise kept at home); people have been observed loitering in the bank's lobby, near the ATMs, and after hours - could these people be there,...