Where did you get your CR from? If directly from the CRA, then look through the demographics section to see if there are any names not associated with yours, including addresses, DOB, SSN, employer, etc. On EX, I believe, you can actually link back the inquiry via their demographic code to get more info.
If I knew I didn't apply, aside from pulling the report, I would place a fraud alert on my CRs and file a police report. I would then call them back to make sure the card wasn't issued and would dispute the inquiry to get that removed.