Turned out someone in the US had tried to buy something from HomeDepot, and used my card number. They had the wrong expiry date though, and that flagged something at MasterCard. They canceled my card so I got to cut it up.
Nerve wracking at first, but not too much hassle after that. Just need to update the automatic payments.