Anyone know if webcertificates.com and ecounts.com have been hacked in the VERY recent past?

I have a friend who uses these sites and received the following email:

Just got this e-mail...the xxxxxxxx's were my actual information

Dear, xxxxxxxxx

Right now your account is under our full
control. And we can use your money for our
profit. Our advise to you - take all your
money off this server.

I hate to inform you that your account
has been hacked on webcertificate.com and
ecount.com. These sites have very weak
security protection system and the database
with credit cards and other personal information
is not protected at all. Your personal details:

xxxxxxxxxxxxx
xxxxxxxxxxxxx
xxxxxxxxxxxx


Your credit card/account information:

xxxxxxxxxxxxxx
expiration time: 5/31/04 11:59:59 PM

We offered them our help many times. But top
management of webcertificate.com and ecount.com
don't care about their customers - you. They
care only about their money.