This does not make sense. The Equifax breach did not give anyone access to your credit cards, only to your personal information (name, address, SSN, etc). I don’t recall if the breach contained account numbers, but even if it did, it should have only had partial account numbers like you see in your own report. Either way, the account number is not enough to use the cards, and I doubt anyone would try to guess the expiration dates and the CVV, it’s silly. Most likely your cards’ magnetic strip is being cloned at some local store or restaurant that you visit. It’s almost impossible to clone the EMV chip, so just do your best to never use the magnetic strip to make payments.