The bank reported that the temporary debits replacing the money taken in those debits are now permanent debits, because the purchases weren't mine in the first place.
I'm indeed relieved. It's been an extra annoyance, dealing with the aftermath of this. I feel I've been reasonably careful with my cards and my account information -- I tear up bank statements and put the pieces with especially sensitive info in my bacon-grease can -- but I've been especially vigilant these past six weeks. I hope I can figure out the best habits for being careful. (Have advice? I'm open to it.)