Look for common patterns, are there places you both regularly use your cards? Look at those places. Sometimes even your bank can be compromised.