I'm away in Sweden at the moment and my bank called me this morning for a fraud check asking if I'd used my debit card in Jamaica for £225 this morning

I said no but there was only one possible place they can have got my details from because I am normally very careful where I use my debit card. About 10 days ago I used my debit card in a petrol station and about a minute after doing it I realised I shouldn't have but it was too late by then
My bank ran down my recent transactions this morning and because I've been away since the weekend the petrol station is one of the last transactions.
The only other place my card has been recently is in my hotel room in Sweden and the maid left the room unlocked on Monday but I can't see it being that.
How do they clone cards exactly and how do they use them?