Candor Account Hack

I have an account with a well known provider and normally get a sativa and indica strain of the same brand every 6 weeks.

I noticed my script had randomly changed to one hybrid type of the same brand. I messaged them to ask why and they said it hadn't, I looked again, and it had switched back. I ordered as usual.

Before the Easter break, I went to order again and it had changed back to the Hybrid. I didn't have time to go back and forth so placed the order.

I went to track it today and noticed the address was in a different state. I saw another persons script info and past orders, messaging etc. however, my messages were also available. It's like the account is a merge of two different people. Their name is in some areas of the portal, and mine the other.

I can now see that I was not charged and I was actually able to charge it to this other persons card. I basically just ordered their prescription for them.

What the heck is going on?! Seems like a HUGE data leak with potential legal issues.

I have obviously messaged them - I'm more concerned someone else has access to my info, like I do with this persons.

Anyone seen this before or have any idea what I should do?!