Got to think the company itself isn't wholly to blame, otherwise why would they send an email out if they were the ones stealing your credit card data?

And if it was somebody else buying it, why put in your actual email address rather than a fake one? The goal here is to keep you from knowing you were charged until they get the goods.

This is odd..

“The Savage 99 Pocket Reference”.
All models and variations of 1895’s, 1899’s and 99’s covered.
Also dates, checkering, engraving.. Find at www.savagelevers.com