This blog post details the circumstances of the recent SA, explains how to review recent orders for fraudulent activity (including SQL queries to aid in searching), and reviews operational best practices for all Drupal Commerce users. Big thanks to the Drupal Security Team and Marcus Johansson for their assistance.