First make sure you do not have any subscriptions with Apple that needs to be cancelled.
If you want to cancel a subscription from Apple - Apple Support
Your card includes a Payment Updater feature that will continue to bill recurring payments even if your bank issues you a new card. This is a feature they provide and know exactly how it works, so if you are receiving a fraudulent charge, they need to actually block that charge, not just provide you a new card that will continue to be charged for the recurring charge. Depending on the Payment Network your card uses, they have a different name for it:
- VISA - Visa Account Updater (VAU)
- MasterCard - Automatic Billing Updater (ABU)
https://paymentcloudinc.com/blog/account-updater/
For Transit Cards, I have seen that they don't always bill for each use immediately. Some have fare caps or reduced fares with a certain amount of trips over a period of time, such as weekly or free return trips. They delay the billing of those fares until they are able to calculate the fare amount to charge. After the period of time is over, you will see the charges come into your phone. It is best to log into the Transit Card website to see the exact date and time of usage, then match that up to the charges. They may also have a billing statement on their website that will better explain the use date for each charge.
It is very common to have a credit/debit card compromised by using it at a terminal where a scammer has installed a skimmer/shimmer to read your card details. This happens frequently at gas stations where a thief has all night to tamper with the terminal and not be interrupted. To avoid this, do not swipe/insert your card in a terminal and stick to the more secure method of using Tap to Pay or Mobile app payment.
As for a possible hack of Apple Pay, there has never been any reports of a hack and you would be the first one.