Hi all,
Woke up bleary eyed early this morning to over a hundred spam emails to my Gmail. In amongst them was an order to a retailer on my credit card.
Thankfully I spotted it relatively quickly, froze the card and got it cancelled this morning. Credit card company is investigating and I've made a complaint as it doesn't appear that any attempt was made to verify before the payment went through. It was three figures too.
I need to carefully go through and make sure nothing else has been missed. Is there a way to figure out how my details were obtained? This email account is generally only used for bills, council tax and work adjacent things - all online shopping generally goes on an older email which I thought would be more at risk for something like this.
I wondered if it was a phishing scam but I haven't used that email with that card recently so perhaps a breach? Although nothing on have I been pwned yet.
I have changed my email password just in case.
Thanks all in advance