This morning, about two or three hours after the email from Roll20 informing of the data theft, the card with which I pay for the subscription monthly was drained. It was used in Johannesburg, South Africa (I am Italian and live in Italy), for purchase in a supermarket. While I block all cards and change passwords, and contact the lawyer for legal action, I would like to know if there are others who have suffered similar problems.