I had a call from someone saying they were from Quickbooks and that they were trying to renew our subscription and the credit card on file was rejected and he wanted a new credit card.  He knew that we had 8 users and a lot of information including the 4 digits of the credit card that was on file which had been changed so it sounded legit.  I told him that I would update the credit card in our account and would not give it to him.  He then said I needed to call him back once done because it had to be renewed by this Friday August 9th.  I was on the road and had to wait to later in the day to go to QB and enter the new credit card.  When I went in to QB the credit card that was on file was the correct credit card.  I called QB and reported what had happened.  She looked at our account and said for some reason even though it was correct on our side it had not transferred to their side.  She fixed it but never asked for the credit card info and sent confirming emails.  My concern is if this was not a legit call for QB how could anyone have this much information about our account.  It seems like either QB has been compromised or someone with QB may be helping with information.  I would like a firm answer how this could happen.