Edited for clarity and includes update
So, on Sunday my Skype account was hacked. They changed my e-mail and password, created a business account (You’d think an account named ‘ASDF” would have raised some eye brows at Skype) and then made four separate charges totalling €150. Skype admits that my account was hacked into, but will not refund the charges. Now I am awaiting PayPal decision about the matter. I've notified my bank, but cannot dispute the charge until PayPal chooses to resolve my case, or not as the case might be.
Turns out this is extremely common (google Skype fraud and there are tons of examples) and has been going on for the past four years at least. The account is hacked into, a business account is created and the auto repay is used to make multiple charges.
Anyway, if you use Skype but don't pay for anything you'll be ok. If you use Skype credits here's the best way to protect yourself: 1) Use a really secure password, 2) Link it to a PayPal account with a different address (with $ coming off a credit card - so much easier to dispute a charge!), 3) Turn off auto recharge, 4) Create your own business account so no one else can. Avoiding paying for Skype services is still probably the best bet.