They made changes to my payment details without my knowledge or authorisation (something they should not have access to do). I raised a ticket for suspected data breach, they spent 2 weeks telling me they were investigating and would update when they knew more. Then in the end they refused to provide me with any information on the outcome of the investigation and closed off the issue by issuing me "goodwill credit".
Do not trust them with your card data! They obviously had a breach but didn’t want to admit this, so tried to silence me by issuing some credit. I’ve reported them to the Payments Regulator!