On 24 October we discovered that someone had gained access to a small number of Joplin Cloud accounts by exploiting a flaw in our subscription checkout process. The flaw allowed them to sign in to an account without know…