Today I received my membership card for costco.com. I hadn't actually joined, so I knew it was the identity thieves again. According to a nice lady I spoke with in their Fraud Unit, they do include the expiration date when validating credit card info, so my earlier complaining about this appears to have been a moot point. It's the credit card company that sent the authorization. I think I need to follow up on that. There's no point in having a card with a company this sloppy if, in fact, this is what happened.
And they confirmed that the package I refused the other day has a Sony Vaio.
And hotels.com might be entering the fray, too. Seems they're not too happy with having their service used by the identity thieves.
And on an amusing note, the lady from costco.com knew who I was. It sounds like they didn't get my email, but they were forwarded my LiveJournal entry about the mess :)