First off let me start by saying that every transaction I’ve had with Sas has always been smooth and with great communication.
Wit that said, although the facts that Sas provided are accurate, the same claim could be made on my end, as this was an isolated incident on my end as well. Plus, how would the hacker know to use the name Becca in their reply if the breach was on my end? That within itself is reason to believe the breach may very well be on his end. The idea that the address got changed to .corn isn’t a clear indication that I got phished. It could be they got hacked and the hacker intercepted the email and created .corn so that Sas would NOT see the payment I provided...
Yes, they offered “a bit” of store credit, but given the uncertainty of the situation, I feel I should be sent the full order at no charge to me.