Suspicious Activity and Failed Charges on My Apple Device

I'm confused and need help. A couple of months ago, I received a notification that a random Apple ID was trying to access my iPhone. It failed, so I changed my password, although it probaly wouldn't do much since it was my device, not my Apple ID, they were trying to access.

Couple days later, I got a notification from my bank about a declined $0 charge from Visa Provisioning Service. I called my bank, blocked my card, and got a new one. A few days ago, I entered my new card details into my Apple ID, and today I received the same failed $0 charge notification.

So I'm just lost a this point does someone have access to my device? Is it even possible to access my device like that? Are they able to see my card number? And how can I prevent them from stealing my card info?