Sorry for any misinformed comment but I’m completely new in ecommerce. I’m thinking on starting some stores and this article took my attention. So, if I understood correctly, the store owner wasn’t affected, but the clients did. The problem was that the card number of the client was stolen? I guess the shop owner has no responsibility..? I don’t really understand where, objectively, the problem starts? Client’s machine, WordPress, Woocommerce, Stripe? I can’t believe there isn’t a safe method yet. Can’t the client receive a double check code in the email, or any other unique transactional token to confirm the transaction? This seems so simple to do. This is very scary and “bad reputation” – I know there are millions of “good”examples but we know how this “bad news thing” works. I think – even more now that having an online store is getting easier and a priority for all – it should be on WP Core (or Woo Core?) something to prevent it. Reputation is at stake.