Possible HACK attempt... somewhat successful...

Hi,

Something VERY unsettling just happened... glad I was here to catch it...

Was not sure where to send this, or if it should go on the forum...

Here's what happened... as best as I can explain:

Someone logged into my Zen Cart. (version 1.39h)

Created an account.

Put THREE orders through my CDG Commerce and Quantum Gateway, using the next order # (3124, in this case)

HOWEVER... there is NO order in my system.

There are THREE credit card charges in my Quantum Gateway, going INTO my account, for THREE identical orders, that DO NOT EXIST in my system.

The only reason I noticed it is because I did not get any "order confirmation" emails, which I ALWAYS get from the site.

I tried to contact the customer, and the phone number they used is "disconnected".

They used MY company name in the "Company Name" field.

I have blocked the IP address that it came from.
I have blocked that IP also on my Quantum Gateway.
I have LOCKED the login and account on my website, so they cannot log in.

Do you have ANY ideas or suggestions how this could happen, and how I can fix it?

Should this be an alert on the forum? If so, do you want to post it or me?

I really don't know if this is a hack, or something that just blew up in the cart and Quantum Gateway.

I have emailed the customer, to see if they ACTUALLY placed an order...
I have also VOIDed the last two, in case the customer DID want to order something...

I've NEVER seen this in 8 years of running my Zen Cart.