Musician's Friend - Cannot Guarantee The Security of My Personal Information - Internet

I recently logged in to Musician's Friend with the intent of placing an order online.  When I did so, I discovered that an order had actually been placed without my knowledge, and several details of my profile had been changed.  While I am a male living in Florida, my account now listed me as a female living in Oregon.

Thankfully, they had used a different credit card to place the order, but there were still a lot of questions here.  How had they accessed my account?  Why were my profile details changed?  Could I be sure that whoever used my account had not in fact obtained my personal information and credit card details?  So, I called the Musician's Friend customer service line in search of answers.

The first person I spoke with, named Alex, agreed that the situaton was quite odd.  After verifying that I was indeed the actual person associated with this account (luckily, I had been a customer for quite some time and there was an order history to help confirm my identity), he put me on hold in order to consult a manager regarding the issue.  He returned with a couple of possibilities: first, someone could have hacked my account; second, the system could have "randomly logged someone in to my account".  !!??!??!??!? Option B set off serious alarm bells, and at this point I simply wished to have my account removed.  Alex was unable to set that in motion, and at that point backpedaled, stating that the issue of someone being randomly logged in to someone else's account had only ever happened once.

One time is really one time too many for an issue like that, and I wanted to speak to a manager.  A manager came on the line (I meant to write down his name, but I honestly forgot - I was frustrated and I apologize for missing that detail) and we once again went through the particulars of what had happened.  The manager also agreed that the situation was odd.  He at first assured me that my account had not been hacked, then later stated that someone had definitely hacked my account, then stated that it was completely impossible that someone could be randomly logged into someone else's account.

He said they would investigate for fraud... however, at this point, I had not received any answers regarding the security of my information, but rather a combination of statements that, when taken together, meant that at least 50% of the information I had received during this phone call was inaccurate (see above: random logging, account hacking). The call ended without any other resolution other than that I should change my password (which I did), and that nothing else could be done until the IT staff arrived in the morning - but, I was assured that someone would contact me in the morning.

Having received no contact by early afternoon (suprise!), I called back and spoke to a customer service rep named Forrest.  He was similarly unable to provide any real information as to what had happened with my account (they were investigating for fraud but apparently not considering that it could have been any sort of internal issue with their system), but at least offered to "flag" my account so that extra verification would be needed for any future purchases (hey, shouldn't the first guy have offered to do that?).  At this point, I again requested that my account and all of my personal information be removed from their system.  Forrest wrote up the request and sent it to the necessary parties (hey, shouldn't the first guy have been able to do that?) and assured me that I would receive a call to confirm the removal had been completed.

So, that's where everything stands now.  My account may or may not have been hacked.  A customer may or may not have randomly been given access to my account.  Someone may or may not call me.  My personal information may or may not be compromised.  I may or may not need to cancel my card and get a new one.

The only thing I know for certain is that it is not in my best interest to do business with Musician's Friend ever again...