Interesting twist: Last July, someone used my iTunes account to buy four $50 gift cards. I had a very secure password (all kinds of characters, caps, lower case, numbers - the whole shebang), my computer scanned clean for keyloggers or viruses, and I never respond to e-mails that request identifying information; of course, Apple refused to admit that the breach had anything to do with its own encryption or software. I changed my password & security questions, and thankfully my bank refunded the fraudulent charges. I no longer store a credit card number on iTunes, instead going through the hassle of entering my information every time I want to make a purchase, then deleting it immediately thereafter.
However, a couple of days ago I received a receipt for two more $50 gift cards that I did not purchase. I checked my iTunes account, and no credit card information was on file, but my city, state and zip had been changed. I checked the receipt, and the credit card used is not one that belongs to me. Obviously some criminal got back into the iTunes store and used my account information along with a stolen or fraudulent credit card number to make purchases.
I don't understand why Apple can't trace where these purchases are being used. I have reported this to Apple and received a very personable response, but it bothers me that even the newest security patch hasn't made iTunes more secure. I have again changed my security questions and password, but it's ridiculous that these breaches keep happening. I've had an account with Amazon for more than a decade and never had any problems; my iTunes account has been compromised twice in less than a year.