[gb2world]

I've confirmed with XCART the ftp user access names I have provided them in the past. None of the ftp accounts I created for QT's use were used to gain ftp access to my server. I am fairly certain I have never given access to any other vendor the account that was used by the hackers to gain access. I've made it a practice to create additional ftp accounts for others who I need to give temporary access.