Bluehost review: Unauthorised credit card charges

My subscription to BlueHost was due to be renewed in October 2023. When I received emails to this effect, I notified the company I would not be renewing. I also checked my settings that renewal was on manual. I noticed the first unauthorised withdrawal on 7th Oct for $165.29 (AU). I contacted Bluehost, reminding them I wasn't renewing and the money was returned. On Oct 29 I began receiving emails saying that Blue Host was unable to process my credit card. At this point I discovered that a charge of $676.46 was pending. A further search of my account revealed that on the 7th Oct when I received a credit, there was a further a unauthorised charge made of $171.85. Communications between myself and Bluehost began in earnest on 29th October. When reminded that I had not authorised a renewal and that my settings were on "manual" not automatic, one agent described it as a "bug " in the system. Today Bluehost has confirmed that it will be crediting me with $309.81, a fraction of what has been defrauded.