Fitbit recently noticed large caches of data from customer accounts being posted to Pastebin. The fitness tracking giant is just the latest victim of customer account takeovers powered by breaches at other e-commerce providers. The data appears to coming from customer computers that have been compromised by password-stealing malware, and customers who re-use the same credentials across a broad swath of sites. The scammers are mainly interested in the premium devices that Fitbit sells such as the Surge, which retails for about $250.”]
Source: https://krebsonsecurity.com/2016/01/account-takeovers-fueling-warranty-fraud/