I don't want to discount anyone's experiences - I've had fraudulent charges on my CC before too - but I'd like to urge people to use a modicum of restraint in making accusations of the SDE shop being a victim of hacking or data breaches just because you've had a fraudulent charge on your card in the UK. Shopify is an enormous e-commerce platform that turns over billions of dollars a year, and SDE themselves do thousands of transactions a month. Transactions on platforms like this are secured with incredibly complex (I won't say unbreakable, because nothing is, but it's close enough) encryption algorithms and organized cybercriminal gangs these days are so smart they know they don't need to break in to Fort Knox to steal the gold any more, they can take your money via smaller and simpler methods like installing malware or a keystroke logger on your computer your mobile device, intercept data on insecure wifi networks, and a variety of other means.
I feel like if there was a systemic problem or vulnerability on their end you'd need a lot more than two hands to count all the complaints from angry customers, here and elsewhere. It could even be that card details were taken elsewhere (or simply guessed) and that the organized cyber-criminals are simply located in, or have accomplices in the UK that are helping them make charges using stolen details. In the last couple of years I had a fraudulent charge on my card from a non-profit charity in Indonesia despite only ever having used my card physically at my local grocery and drug store, and online via Amazon.
Don't forget that when you say something on a place like this on the internet it tends to live on indefinitely, and people are much more likely to listen to the initial story rather than a later-posted retraction. Take it from me, 5+ years later I'm still trying to set the record straight about my incorrect assertions that the Isley Bros. and O'Jays quad channel assignments were wronng. It would be a shame if SDE's long-germinating momentum in doing these physical surround releases was stalled or killed entirely by something that turns out to not be true at all.
