It's curious that you use expired to mean "payments were rejected before the expiration was reached".

Sure. Wrote that late at night when overly tired. There's nothing nefarious going on here.

I'm still not exactly sure of the correct terminology for the situation. I'd noticed two suspicious transactions on the credit card, rang up my bank about it, and we agreed they'd better generate a new credit card and kill the existing one.

I then contacted all of the places that I knew of to update them with the new credit card details. I missed Hetzner and (from rough memory) two others. Only Hetzner wasn't able to handle it correctly.