A friend of mine has bought a few years ago credit card info in the Darknet and bezalht now eg Fortnite skins. He said you can't trace it back but I believe it less. Can you trace that back to him?
If the owners of the stolen data learn of the theft, they can be traced who used that data when and where. His purchases can therefore be traced back, provided that the actual owners bring this to display or report the competent bank.
What can't or can only be traced very hard is the purchase in the Darknet or the origin of this data in the Darknet. The one who sold this data to your friend is relatively save, but your friend can be tracked down.
The credit card may not be tracked, but his purchases are. Because he does not buy the Fortnite skins in the Darknet. And you can determine it via the IP address.
At some point it will be noticed and then it is too late for excuses!
The damaged company will know, where the services for payment have flowed.
