Source: Security Fix
There is some question as to whether the iTunes voucher code system has actually been broken (as reported recently). The basis for doubt is that the vouchers must be activated at the point of sale before they can be redeemed. Even so, the iTunes codes offered for sale are definitely working. One theory is that the codes are simply being purchased online using stolen credit card data, then on-sold.