There is a shitty think called "Card refresh". Big companies can have deals with Credit card companies, because, at the end of the day, both of them need your money.

Lets say, you gave your card automatic monthly billing to company 'X'. You would normally expect that when card expires, it won't be billed anymore and they will ask you for new card details. The reality is company 'X' goes to credit card company and tells them "We have these card details with us. Everything except expiry date is same. So you can conclude that we legitimately obtained the card details. Can you give us the new card details. We will update the account accordingly. It is even useful to the customer as he will be (cough cough) inconvenienced."

I think something similar happened in your case. Source: I implemented this in a big e-commerce company(Not AMZN).