OOIDA's site hacked - cc numbers may have been snagged

Thread Tools
  #1  
Old 06-24-2012, 04:20 PM
Senior Board Member
Thread Starter
Join Date: Dec 2008
Posts: 1,441
Default OOIDA's site hacked - cc numbers may have been snagged

In case you didn't get the letter. Sometime between Jan 15 and May 8 OOIDA's site was hacked and credit card numbers might have been taken.

But the good news is that "When we discovered the breach we immediately informed our internet service provider and took the necessary steps to prevent this from happening in the future". Why didn't they take the necessary steps before this happened? Encrypting the data is a little too much like work?

I love how corps tell us again and again how much they care and yet actions speak so much louder than words.
 
  #2  
Old 06-24-2012, 04:25 PM
GMAN's Avatar
Administrator
Site Admin
Board Icon
Join Date: Feb 2005
Location: Tennessee
Posts: 17,097
Default

This is the first that I have heard about their website being hacked.
 
  #3  
Old 06-24-2012, 04:53 PM
Senior Board Member
Thread Starter
Join Date: Dec 2008
Posts: 1,441
Default

[ATTACH=CONFIG]1075[/ATTACH]
[ATTACH=CONFIG]1076[/ATTACH]
 
Attached Images
File Type: jpg
OOIDA Letter1.jpg (20.8 KB, 8 views)
File Type: jpg
OOIDA Letter2.jpg (21.1 KB, 2 views)
File Type: jpg
OOIDA Letter1.jpg (100.9 KB, 8 views)
File Type: jpg
OOIDA Letter2.jpg (94.2 KB, 2 views)

Last edited by MichiganDriver; 06-24-2012 at 05:03 PM. Reason: Reposted the pics because the first 2 wouldn't enlarge. Now 2 pics plus 2 "thumbnails"? lol
  #4  
Old 06-25-2012, 04:42 PM
Member
Join Date: Aug 2008
Location: Winterpeg
Posts: 112
Default

If you're just a member only, ie don't have insurance through them or other dealings, I would hope that they don't even have your credit card number.

When I renew my membership I use my credit card, but don't see why they would keep it on file. I'm hoping that I'm okay?
 
  #5  
Old 06-25-2012, 10:37 PM
Senior Board Member
Thread Starter
Join Date: Dec 2008
Posts: 1,441
Default

Originally Posted by barf
If you're just a member only, ie don't have insurance through them or other dealings, I would hope that they don't even have your credit card number.

When I renew my membership I use my credit card, but don't see why they would keep it on file. I'm hoping that I'm okay?

When you renew, do they prompt you to select a saved credit card?
 
  #6  
Old 06-26-2012, 12:21 AM
Member
Join Date: Aug 2008
Location: Winterpeg
Posts: 112
Default

I've always used the phone to renew. Guess I'll have to keep a close watch for any unwanted transactions just in case.
 
  #7  
Old 06-26-2012, 12:43 AM
Senior Board Member
Thread Starter
Join Date: Dec 2008
Posts: 1,441
Default

Originally Posted by barf
I've always used the phone to renew. Guess I'll have to keep a close watch for any unwanted transactions just in case.
I had a credit card number stolen just last month. How I found out about it, is there were 4 (not kidding), 4 charges for Experian credit reports at $12.95 each on the same day. I can't understand how that makes any sense but that's what happened. I canceled the card and the only problem I had was that I completely forgot about autopays. I got a testy phone call or two from people thinking I'd suddenly become a deadbeat.
 
  #8  
Old 06-26-2012, 01:55 AM
GMAN's Avatar
Administrator
Site Admin
Board Icon
Join Date: Feb 2005
Location: Tennessee
Posts: 17,097
Default

Whomever got your credit card information may have ordered credit reports to gain additional information so that they could find other credit information on you. It doesn't make sense to purchase 4 credit reports unless it was for different people. I found a couple of charges on my wife's credit card over the weekend. I called the bank and then the people who put the charges on the account. When I threatened to talk with the state attorney they decided that they might ought to cancel the charges. I will still follow through on the account. I canceled the credit card over the weekend so that noone else could use it. We received the products that she supposedly ordered today. It was not something that she would even have ordered. She is not one to order from a TV ad or over the internet.
 
  #9  
Old 07-01-2012, 09:15 AM
Senior Board Member
Thread Starter
Join Date: Dec 2008
Posts: 1,441
Default

In all fairness to OOIDA - I don't think most companies go through the trouble of encrypting data and at least OOIDA says they'll start doing it.

And Membersedge is far and away my favorite load board.
 
  #10  
Old 07-03-2012, 09:14 AM
Board Regular
Join Date: Jul 2005
Posts: 382
Default

I've been programming computers since i was 17. Thats 30 years. Mostly as a hobby but also professionally.

IT is NOT like locking your business door for the night and being sure that its safe. And the problem isnt even really the corporations employees. IT is usually microsoft but in some occasions it is one flaw in one routine in a process that noone thought could be hacked. As an example the most prolific programming language for serverside web apps used to be php. About 10 years ago someone discovered an idiot programmer forgot to do bounds checking and that you could just add on commands to the end of a URL and the webserver would execute them. Which meant you could do anything you can concieve of on the server... I HATE corporations and how corporate and fascist america is becoming but you really cannot blame the corporations for this they truely do their best.
 



Reply Subscribe

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT. The time now is 02:25 PM.

Top