Someone hacked my account and bought a gold pack and fifa12 for an xbox while I only own a PC. why is there no security question or a request for the last 3 numbers on the back of my card? why are microsoft happy for these thefts to continue? a quick google shows reports going back years ago and still no security in place yet? it must be that no one cares where the money comes from as long as it keeps coming. At least issue a warning to remove card details from every account or do it automatically for every account... do I hold microsoft responsible? well if this was something new then maybe no but as there are many many many many many case documented and they've had a long time to address this then YES they are responsible I think court action may be the only way to make them address their lack of concern.