Someone hacked my Lenovo account and was able to purchase a $2000 laptop. They didn’t need to confirm my identity at all or even my saved credit card on file by writing the CVV. I saw the order immediately and called Lenovo to cancel it. They agreed and that they would forward to fraud department. They never did so. I have a number of phone calls back and forth with them where they know they were negligent in addition to the data breach.