I can't prove it but I suspect Postmates was hacked last week. One morning I got a login alert from Postmates (I haven't used them in at least a year, don't even have the app installed anymore). I promptly reset the password. An hour or two later I got a fraudulent charge on the credit card that was on file with them. I've had this card for years and am extremely careful with it (always use chip, etc). I suspect they are storing full numbers without the requisite security controls (a big PCI violation).