At 3:31AM (AEDST) on Saturday the 15th of October we had our Stripe account hijacked via our website and over the next 8 hours the criminals attempted to process over 60,000 credit card transactions. Apparently the goal of these types of attacks is to test stolen credit card details. In this instance 2,100 were successful, all for AU$10. All of these have now been manually refunded and Stripe advises that these amounts should be returned to bank accounts in the next 5-10 business days.
If your card was debited by ‘us’ for AUD$10, which is not an amount linked to any program we sell via our website, it means your card details have been stolen. You need to contact your card issuer immediately and cancel your card.
Stripe advises that the refunds should take 5-10 days to show up in peoples accounts.
We sincerely apologise for any incovenience but also need to point out that this was nothing we did but was perpetrated on all of us by an anonymous 3rd party.