So, I added someone as a friend today that I didn't recognize but just assumed was from here or pbnation.com. Well, I believe that person got ahold of my account and tried to order a bunch of MS points with it. Lucky for me, the CC that was attached to the account is from a closed account. So nobody has to learn my way, don't add people you don't recognize. I didn't think XBL was able to be breached like that.