That's what I did. I couldn't sleep at all Thursday night thinking about it, so I went to the bank Friday morning and declared that card a hot card, and if anyone tries to use it, they're in for a surprise.
I think I'm going to close the account anyway. I don't do that much buying on the intarweb anymore, and the security risks are just too ******* high and Paypal doesn't do a goddamn thing about it besides say it was a fraudulent email.