And to wonder wtaf I need to do about it?
Have clicked the contact us thing, logged in and removed the address from my account, changed my password and removed my card/bank account details from the account.
I feel sick. How can I know they haven't got hold of my bank details? What else do they know about me? Is it even slightly possible it's just an innocent mistake?