Parents are complaining of losing hundreds or even thousands of dollars after a school photography company was hacked.
Queensland School Photography contacted schools stressing no images were at risk despite "confirmation that our online ordering system may have been compromised".
Parents at affected schools were being urged to check their credit card history for fraudulent transactions and contact the company with problems.
Some reported dodgy transactions for Ubers, Google Ads and even Qantas flights, with one mother claiming she was out $1885.
"We have been advised by Qld Schools Photography that there (sic) website was hacked last night," Holland Park State School warned parents via Facebook on Friday.
"As soon as they were told, the website was pulled down immediately. The website is currently unavailable and the web designers are looking into it.
"They have notified all families and unfortunately there has been an incident where a family had 'overseas transactions' on their credit card, please check your cards."
Other schools warning parents included Hilliard State School in Alexandra Hills, Glasshouse Christian College, Elimbah State School and Eatons Hill State School.
"Upon confirmation that our online ordering system may have been compromised our system was taken down immediately for investigation and all security measures checked," QSP wrote.
"At no stage has any children's images been at risk."
QSP wrote to principals saying no "credit information" was stored on its website and it took the matter seriously.
"The culprits have done this for the sole purpose of credit card fraudulent activity. Our bank is conducting a full investigation," the letter stated.
Fairfax Media has not yet been able to contact the company for further information.
The company said its website used Secure Socket Layers (SSL) on every page and was compliant with the Payment Card Industry (PCI) Data Security Standards.
"For those who have already placed orders, all orders are still valid providing you received an online reference number," it read.
"Please be assured that your student's safety is of the upmost (sic) importance to us and we act accordance (sic) with our privacy policy."
