DVD Pacific: customer credit-card information hacked

Douglas Bailey · 08-17-2004, 09:45 PM

I just got this e-mail from DVD Pacific:

Quote:

Dear Douglas Bailey,

Our web site has recently been subjected to various hacking attempts. We upgraded our security measures in lieu of this to ensure the personal information we hold for you is fully protected. Part of these security enhancements have provided us information that led us to believe that some data had been compromised by way of a worm on the server. No anti virus or spyware was able to detect this but we now have information that contact had been made with an IP address outside our network. We attempted to capture this information without it leaving the server so as to determine exactly what was being transmitted. Unfortunately this worm had some type of self detection available and as soon as it realized we had discovered it, it self destructed leaving no trace evidence.

Yesterday the IP addresses we suspected behind this launched a malicious code attack on our SQL server and this allowed us to track their IP addresses to their source and we have identified ISP’s in Russia and the Ukraine. We have contacted the FBI, Secret Service and filed a full report at www.us-cert.gov. Further a report has been filed with FSB.ru. We have blocked any possibility of this type of attack being successful but as a precaution we have auto updated all member account access passwords and now sending you your new temporary password as indicated below.

Your Login - [snipped]
New Password – [snipped]

We would also request that you pay particular attention to your credit card statement to ensure that your not subject to any fraudulent transactions and if so notify your credit card issuer immediately. We will be providing a list of all cards we have on file to each of the credit card issuers so as they can also monitor any suspicious activity.

We will continue to monitor this situation closely as we have been since it arose and you can be assured our efforts to provide you with the safest shopping environment online will always be of the highest priority.

If you have any questions in relation to this issue please direct them to webmaster@dvdpacific.com

Regards,
DVD Pacific Inc.
Customer Information Support
www.dvdpacific.com
www.cdpacific.com

I assume this got sent to all their customers, but I thought it was still worth mentioning it here, not least for potential customers considering DVD Pacific.

alan halvorson · 08-18-2004, 03:32 PM

I got this also. I've only tried to order one thing from DVD Pacific, which got canceled, and now this. I haven't come across anything funny on my statement, but I just may have the card re-issued anyway to be safe.

Douglas Bailey · 08-18-2004, 04:21 PM

So far, I haven't seen any suspicious activity on the one credit-card I've used with DVD Pacific. But another customer posted in alt.video.dvd that he'd had a $500 spate of unrecognised charges on his card, so it's certainly worth checking...

BrianP · 08-19-2004, 01:34 AM

There is a 2 page thread on this subject over in the DVDTalk store forum. Looks like there are a lot of people getting unauthorized charges on their credit cards. Fortunately I never ordered from them. But several years ago I wasn't so lucky when CDUniverse had their website hacked. I never received any unauthorized charges on my credit card but that was because I quickly called my credit card company and asked for a new card before they could get a chance to use my card number. I would get a new card as soon as possible if I were you.

http://www.dvdtalk.com/forum/showthr...hreadid=376062

Gunnar Syren · 08-21-2004, 02:39 AM

I had an unauthurized charge on my credit card, but fortunately my cc company is very good at refunding such charges. I'm keeping a close watch on any new charges now, but so far I haven't seen anything more suspicious.

I'm still shopping at DVD Pacific occasionally, and I would think that they've tightened up their security quite a bit to avoid being hit again. Once is bad enough, but twice would be extremely serious for them.

So my guess is that DVD Pacific is probably among the safer places to shop right now.

**HTF Ads**



Skin Chooser:	Contact Us - Advertising Information - Home Theater Forum - Archive - Top