Something fishy is going on at Coinbase

Hello r/CC, today I noticed something very weird going on with both my sister's and my own Coinbase account. About a month ago, my sister noticed a $40 charge from Coinbase on her debit card. She hadn't used Coinbase for quite literally anything in over a year, so we login and see no transactions anywhere on her Coinbase account. We assumed that someone got her card number and decided to steal an absurdly low amount of money, canceled her debit card and assumed we were out of luck.

That was until tonight, when I see the exact same $40 charge on my debit card now. I also rarely use Coinbase, last time was mid March and before that November, so at this point I know it has to be Coinbase. Check my account, no transactions except the ones I know I made, so I contact support. Turns out 3 months ago I had subscribed to Coinbase One. Something I have no recollection of doing and also makes no sense with when I was last on Coinbase. Why would I have subscribed to Coinbase One a whole month before I make a purchase? Why would my sister have gotten it at all? She literally hasn't touched her account since before Coinbase One was a thing. The only good thing about this interaction was that support was quick to refund my $120, but also seems like they want to keep outrage over this low. Imagine if just 5% of the 98 million accounts on their platform are getting these fraudulent charges while not using any of the services provided by Coinbase One. That's literally 200 million a month. Wonder if this is big enough to be class action territory.