She was purchasing items offline at a well-known craft store. The transaction went smoothly and she ultimately received her items shortly after purchasing them. Nearly a month after receiving her items, she noticed unusual activity on one of her other credit cards. Luckily for her, her credit card company had noticed and sent her an email informing her that there was suspicious activity on her card if she confirmed that she had made these purchases. She hadn't made the purchases and discovered her card had been hacked when she used it at the online craft store almost a month before. She was concerned about how they had hacked into a different credit card account than the one she used for the purchase. This person made two different transactions in Michigan with her card, so my mother knew it wasn't her because she wasn't even in Michigan on the date the items were purchased. The credit card company held her credit card and did not charge her for these purchases. We later found out that the hacker had hacked into her craft store account because she didn't have a very strong password and in her account she had saved the other credit card information. All of her personal information was saved to her craft store account so that this person could access it. My mom had to cancel that credit card, change her email address, and open a new craft store