INTERENT ***** STANDARD BANK

I have been a victim of internet ***** in September 2015, on my master card & cheque card. I had received a link from U-Count rewards which was a hackers link. I was then de*****ed of R 5000.00 - Within a minute of the transaction, STD bank picked this up and called me to stop my cards. This was then logged as a complaint. To date I received 1 call, the consultant mentioned that it seems like the payment was made to a municipal account. They were going to track it, and it most likely will be returned as we have stopped the card, and then I would get my refund back. To date, I battle to get hold of anyone who can tell me when I will receive my money. I believe the bank is responsible for my personal information leaking off their system, which resulted in me been caught like this. My question is how did the hackers get: 1. My e-mail address 2. My cell number 3. Know that I am a U-Count registered rewards programme, when I have never used the U-Count rewards card or swiped it. The hackers must have got this information from the standard bank data base. I expect the bank to keep my information secure, which I do not believe they did, therefore hold them responsible for this refund.