So I use a debit card for ecig purchases and only keep $100 or so in there just in case - a couple months ago they got my card and it just happened again today. Last time I was buying from at least 4 diff't places but since I got my new card I've only been buying from 2 sites - aquavapor and ecigsexpress - so just a heads up, one of these 2 sites is using a processor that's most likely continually being hacked - I've been buying from these sites the whole time so now I'm positive it's one of the 2. Time to switch to paypal only. LF will be getting all of my business from now on.