Drop-shipping. The thief will use a hacked account as the middle-man between income and fulfillment. Buyer buys from Hacker. Hacker drop-ships from a Brickpicker using hacked account, who ships to Buyer. Buyer gets product. Hacker keeps Buyer's $$$.
If the hack isn't noticed, the hacked account loses. If the Hacked account notices the fraud and files a charge back, the Brickpicker loses. Depending on the nature of the hack, sometimes the platform will cover the fraud.
To the Brickpicker, it's almost impossible to tell the difference between gift orders, normal drop-shippers, and drop-ship fraud.