They had a massive data breach. as their software is totally bad and the IT department seems to be as qualified as their customer service or authentication team (though not sure if you can use qualified for anything Vestiaire offers) In case you got the email that "As part of our ongoing efforts to ensure a secure platform for our collective, we've recently taken proactive measures to enhance the protection of your account. This includes resetting your password due to your extended period of inactivity." it is BS they are LYING TO YOU, AS USUAL. Everybody I know who uses Vestiaire got the email, it is because they have been hacked, make sure you monitor your credit card bills in the future, and if you use the same password as you used on VC somewhere else with the same email, change it. Print out the email or store it, if you have any money taken from your account or somebody tries to use your credit card or tries to access your bank account or PayPal, give it to them and tell them why, it is most likely also a GDPR violation, which is something Vestiaire seems to do regularly. Do hold those scammers accountable