Did my Agoda account get hacked?

I've never used Agoda before, but I made a brand new Agoda account to book some hotels in Indonesia (that were only available to book on Agoda).

I linked it to my existing Gmail account in the sign-up and all seemed fine. When I made the booking, I inputted my credit card number, but selected the option to pay later. An hour later, I then got some emails from Agoda in German telling me that my bookings had been cancelled. I checked my credit card transaction history and it only showed 0.00 transactions from Agoda.com, and nothing else out of the ordinary.

However, when I logged into Agoda, I could see my ONLY bookings were for a hotel in Sydney made last week (before I created the account today), using a credit card that is NOT mine (I've never seen the last four digits before). There was also an ongoing message chat with "customer service" (bot?) where someone reported the Indonesia hotels as unauthorized fradulent charges and confirmed that the only authorized hotels were for a hotel in Sydney. He then proceeded to say that the email on file had been changed and gave them HIS email. I panicked, unchecked "save payment history" in the profile, then deleted my account in Agoda (though apparently they'll retain my info for 120 days?)

I took screenshots of the chat messages, but couldn't find any working phone number for Agoda customer service.

Has this happened to anyone else?