If it's my credit card information then all the merchants who end up passing my card fraudulently are the victims, because they are the ones who won't get paid.

I won't have to pay a dime for transactions I didn't authorize.

I suppose I could call "victim" for having to watch my statements more closely, but everyone does that anyway, right?