Attached Link: http://www.lavasoftsupport.com/

I'm guessing unauthorized downloads using someone else's accounts are via key loggers. In other words, it's probably the user's fault, not the merchants. Basically there's a lot of spyware around that records all your keystrokes, and sends it to a central server. I guess it's worth mentioning if you're cruising the Internet on a Windows PC without some form of firewall is an invitation for this type of mischief. Windows XP service pack 2 is supposed to help with spyware. I'd suggest using Lavasoft Ad aware, which is independent. I believe it's still free. See attached link.