One of my card companies which I have used to purchase via Kabam/TrialPay called just now to inform me of an attempt to change my billing address to one in Delaware, and issue a card/PIN. I'm nowhere near Delaware, but more important, TrialPay is in Delaware. The card in question is used in very limited fashion; at this point it was only used for Kabam, which is why I picked it specifically.

My guess is that - and it's only a guess - TrialPay is storing the CVV2 number for cards that are used to make purchases, and someone who works there is making improper use of the information. Again, I have no proof, but there are just too many coincidences to ignore. If TrialPay is storing CVV2 then the same thing could happen to others.