Once you have a card number + personal details from previous attack. Expiry date is the lamest to crack. cards are issued for years and not months, so it will mostly be the same month as when the card was issued, i.e the same month as the card was blocked. year part will be a company policy right? i.e from the year of issue + x years types.

CVV is just a 3 digit numerical hack. if you have all other info, cracking CVV should not be a challenge.