My son and his wife put a deposit down on an apartment. Their application was approved and they are to move in soon.
Yesterday they found out they suffered an "identification theft" and their credit card was used to purchase goods that drained their account. Although it has been worked out with the credit card company, it will take several days until the money is back in their account. They need to make another payment to the apartment manager this week. He says that if they do not pay it on time (tomorrow), they will forfeit their deposit.
This is obviously not right/unethical. But is it legal? Is there someplace they can turn (some "ombudsman" or such) to act as an arbitrator or advocate for them in such a situation?
To make matters worse/weirder, when he heard about their plight, he said it was funny, and volunteered that his computer system had been hacked. So the breach may have taken place "on his watch" (I wouldn't go so far as to say it's his fault, because it's the criminals' fault) - how sadly ironic and frustrating it would be if he were more culpable than them for the breach and then makes them pay for it.