[dangrossman]

They should not and likely will not tell you anything about who made the purchase. One alleged illegal act does not make another legal -- they can't violate their privacy policy, privacy protection laws of various countries, and the payment data protection regulations of their merchant account acquirer.

Fraud like this is rarely that transparent anyway -- it's often part of a multi-step process to launder money (buy something with stolen money, sell it for legitimate currency) -- and you'll end up with the IP address of a proxy in Romania that's of no use to you or anyone else. It's also unlikely the person that used your card is the one that stole your card -- the numbers are stolen then sold in bulk on forums for $1-2 a card.