I would just like to second that all electronic data is always vulnerable. Even very routine and secure data such as receiving your paycheck, SSI/SSDI benefits automatically deposited, paying utility bills online, and electronic health records are all "out there" to be accessed by dishonest people. This is not the fault of the person who, say, paid their heat bill online, it's just a fact of modern technology. Dishonest people will always go out of their way to target people who may be more vulnerable, such as those who are known to them through their online activities to have mental illnesses.
It is good to be informed of this, and always monitor all transactions of money. For people who dissociate, odd transactions may need extra investigation, but if it feels "wrong " always dispute it right away. If you discover it accurate later, this is a much easier fix. 😊