Well, I know first hand that they got CC info. My mother in law had her card used and they racked up over $8,000 on it in 1 day. She had used it for my sister in law's PS3.