This morning someone was able to hack into my account and order 9 of the same lipstick to be delivered 1500 miles away. I was notified of the charge from my AMEX app and, sure enough, I checked my Sephora account and there was a pending order for $553. They were able to cancel but you may want to check yours just in case.