TBH.... I'm getting increasingly wary of online money bombs. I love the success RP had today, though, no doubt, and a great deal of his campaigns' financial success can be tied to moneybombs. But... our personal information is probably already widely distributed (privately, if not publicly), no matter how safe we think we are being. Google your email address and see if you can't find yourself on a dumped list. These online dumps serve to warn you your information has already been compromised.
Moneybombs take tens (hundreds?) of thousands of unique credit card numbers and extraordinarily high amounts of personal information all in one day. That's extremely serious business, and would be a huge lure for serious hackers -- the slimy cracking kind, and not the 18-25 y/o's in the news because they've been detected. A site falls to DDoS. Do I trust they'll be able to secure the most data I've ever given in a single transaction? I hope RP's campaign IT staff are the most competent and dedicated workers he has. He created the online moneybomb, and they aren't going away from politics, especially not our own where we've seen their power at work.
I think RevolutionPAC is having a moneybomb on Sep. 19th. I very much hope their IT staff is competent and dedicated. For smaller campaigns, it should probably be seriously considered to only handle offline payments. 16-year-olds are being arrested for causing serious disruptions in Paypal's service. Those are the ones being detected and caught. How many go undetected? How many experienced hackers/crackers are after our information? How many realize the treasure trove of information which could be found during moneybombs while the candidates are relaxed, watching thousands or millions of dollars rolling into their campaign funds?
At any rate, we all need to take online security seriously. Use many different complicated passwords (consider a service like LastPass. Not perfect, but your passwords will at least be encrypted). Use different usernames. Consider plastic companies which provide a service giving "fake" virtual credit card numbers. Never give information which could harm you over unsecured (that is, connections which aren't encrypted) or otherwise vulnerable websites. I'm not paranoid, but I've personally and recently experienced a major breach of my personal information. By using basic security methods (different passwords and usernames, in this case), most of my accounts are at no greater threat than prior to having my information distributed. Don't ever assume your accounts won't be cracked.
Edit: FWIW, I've been assured Ron's (and Rand's, for that matter) server infrastructure is sound and handled by extremely competent professionals who've worked with large corporations' infrastructure. If you search enough, you can find out for yourself which company designed and maintains the Pauls' campaign servers, but they have a very impressive resume. However, my concerns over RevolutionPAC's moneybomb and other smaller campaigns continuing on with online moneybombs remain unaddressed.