We did of course, cancel the credit card immediately. I have sent a email to IW asking to explain how the data came to be on their server. As some of you have suggested it may be that she has placed, or attempted to place an order in the past and her details were taken. I know she has ordered...