One other user familiar with the exploit informed us that the way sellers are doing this is that they are racking up credit card balances from one user, and applying it to three other PlayStation accounts that get placed on separate consoles to be sold; although they'll eventually be banned if they ever go online.
There are several others out there with the exact same scenario, which all pertain to the use of the Family management sub-account, something we didn't want to originally state in the article due to it being a part of the exploit.
Yeah I see what's going on here. This is a nothingburger and the exact same thing could happen if a Google or Apple account got compromised with CC details saved.