At this point our investigation is ongoing, but what we have found in every single case so far is that the cards were used immediately (within about three days of purchase) and exclusively for EA Games, and then dumped. We haven't found a case yet where that was not the case, but we're continuing our investigation. This seems to be so prevelant that the credit card companies watch specifically for that pattern and shut down cards immediately if they are being used in this manner. It does not seem to be related to the spam issue (aWeber, our newsletter provider, had their database hacked, and that's when that problem started. I think I posted about it at the time.) We are continuing our investigation already this morning but basically we haven't found a case where it wasn't caught by the credit card company, nor have we found a case where the cards were used after that short window. I can't say anything definitely since we are still checking, but that's what we have found so far.
