insecure online shops

I placed the order on the tomtop.com homepage for a DMX to USB converter. I went in on my Facebook credentials and placed the order. The payment window came up asking for my card details which I entered. A day later the money was taken off my bank account this was on the 5th of July 2018. Today is the 29th of August and I have still not receive an email or any other form of notification although the amount was taken off my account with the tomtop's name and some bogus order number which tomtop does not recognize. When going onto the tomtop.com login window my order does not show. I didn’t take a screenshot either expecting a confirmation email as with all other purchases we make online. I suspect my order was hacked somehow. The bogus order number on my bank account statement is all I have. It seems I lost my money to a insecure online shop allowing hackers to shadow their clients.