it's simple identity theft. tell your dad to stop buying research online and he won't have his info stolen.
go ring your credit company and bank and cancel the card, that prevents the thief from being able to spend any more of your money. Odds are they'll refund your money if it's clearly not your purchase (like if your dads purchases are generally at hardware stores, and all of a sudden some dude just spent 200 bucks on some website, they'll instantly refund you), but if it's osmething that could have possibly been done by your father, they'll send you some paperwork, he'll fill it out. and all will be well.
