Hacking and credit card details - are we at risk?

Captain Futura

Dear Ten Club/Pearl Jam

Please don't just lock this thread. And don't ignore it either.

If you read these posts, as you obviously do, you will see that many people are now very concerned about their financial and personal details in the light of your explanation for the collapse of the pre sale.

Many of us handed over credit card and sensitive matching information such as addresses - all of which would be an absolute gift to an online fraudster.

Since the number one reason for sabotage would be financial - i.e. farming users' credit card details - then we need to know the extent of the hacking and whether our bank accounts/credit cards are at risk.

We need to know if we need to stop our cards - there are some very disconcerting tales on here of people whose banks originally blocked transactions as suspicious.

This is more than just a botched ticket sale. Unless we take action now criminals could be emptying our bank accounts and running up credit card debts unless you act and tell us everything you know about the extent of the supposed sabotage and its nature.

Bad customer service and shutting up people who complain is one thing but this is a potentially different ball game. You may have put us all severely at risk financially and you owe us answers.

andriesk

If any potential hacker out there has my credit card details - have at it! Let me put it this way, I had 102 in my account before I got my MEN tix....

Dukes10

I think you are over reacting. Don't take it to the n th degree. You are at the same risk everyday with every transaction you make.

Better Dan

Dukes10 wrote:

I think you are over reacting. Don't take it to the n th degree. You are at the same risk everyday with every transaction you make.

Yeah, but 10C/crowdsurge just claimed that they were compromised without explaining what that means for people's info.

Captain Futura

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

Better Dan

Captain Futura wrote:

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

Yeah, but 10C wasn't really hacked.

strongmendieyoung

Captain Futura wrote:

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

I see it as a CYA move on their part as well. If customers are not pro-active about protecting their accounts after 10C has notified them of the compromise, I'm sure 10C is relieved of some liability

Captain Futura

Better Dan wrote:

Captain Futura wrote:

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

Yeah, but 10C wasn't really hacked.

Surely you don't mean they lied to us, Dan?

Better Dan

Captain Futura wrote:

Better Dan wrote:

Captain Futura wrote:

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

Yeah, but 10C wasn't really hacked.

Surely you don't mean they lied to us, Dan?

I think they are incompetent when it comes to tech. I know they accused someone of hacking the web site because he could see a buy button...I just don't think they know what they are doing.

Captain Futura

Careful. You might get a phone call.

Better Dan

Captain Futura wrote:

Careful. You might get a phone call.

I don't mean to be rude, but a lot of PJ presales have had issues...are we to believe they've all been hacked then? I think the problem lies with them, not hackers. I admit I could be wrong, but I (and many others on here) just aren't buying what they are trying to sell us.

Captain Futura

From another thread:

Washington has a law requiring notification about compromised personal information.

http://apps.leg.wa.gov/RCW/default.aspx?cite=19.255.010

We need to be told.

SoonForgotten2

strongmendieyoung wrote:

Captain Futura wrote:

It's customary when a site is hacked for the site's owners to warn customers that their accounts have been compromised and to what extent they may be at risk.

Playstation, for example.

I see it as a CYA move on their part as well. If customers are not pro-active about protecting their accounts after 10C has notified them of the compromise, I'm sure 10C is relieved of some liability

Surely they would need to notify as as soon as possible if this actually happened and not 30+ hours after the fact. People who contacted CS today were never informed of any such sabotage. If this were true 10C would absolutely need to state to what degree this occurred and whether or not our personal information had been compromised.

capthowdy1027

The fact that we're not being told is proof that the "sabotage" excuse is crap.

SoonForgotten2

Captain Futura wrote:

From another thread:

Washington has a law requiring notification about compromised personal information.

http://apps.leg.wa.gov/RCW/default.aspx?cite=19.255.010

We need to be told.

On that note, I'd like to be assured that the authorities have been contacted regarding this matter.

KingJeremyD

Your at risk anytime you use your cc or debit card online...

mr_canada

10C...either admit you lied about the hack or respond to your members request for more info regarding stolen personal info. End the speculation once and for all.

Better Dan

Bump..are you going to address people's concerns?

mfc2006

Better Dan wrote:

Bump..are you going to address people's concerns?

don't think it's going to happen.....
wow.

SoonForgotten2

mfc2006 wrote:

Better Dan wrote:

Bump..are you going to address people's concerns?

don't think it's going to happen.....
wow.

They're absolutely useless. At least we finally see their true colours, leaving no doubt.

love-boat-captain

I do hope no one here is under this ridiculous illusion of sabotage. Please!!!

Shame on you TC. U must think we are stupid. You're letting the band down.

mr_canada

Please respond 10C. You claimed your system and another companies system were hacked. You have tens of thousands of member’s financial info. Was it compromised?

janvanderdam

I got this message today from Crowdsurge about the credit card details:

We can assure you that there is no security risk.  Had this been the case we would have taken immediate action

meme

mr_canada wrote:

Please respond 10C. You claimed your system and another companies system were hacked. You have tens of thousands of member’s financial info. Was it compromised?

Notice that they didn't say 'hacked' :roll:

Better Dan

janvanderdam wrote:

I got this message today from Crowdsurge about the credit card details:

We can assure you that there is no security risk.  Had this been the case we would have taken immediate action

How can they know so fast if they are just starting the investigation? Or is it because there was never any sabotage to begin with..

NothinMan

I don't work for Ten Club or Crowdsurge, neither do I have any information other than what everyone else has. However, I am an IT Security expert and I can attest to the fact that it is very easy to tell that despite a Denial of Service Attack (which is what this is, if it in fact did occur), there is no evidence credit cards are in danger. These kinds of DOS attacks occur from outside the network and do not require the attackers to have any sort of access to the server above what anyone else has.

Hopper

Better Dan wrote:

Captain Futura wrote:

Careful. You might get a phone call.

I don't mean to be rude, but a lot of PJ presales have had issues...are we to believe they've all been hacked then? I think the problem lies with them, not hackers. I admit I could be wrong, but I (and many others on here) just aren't buying what they are trying to sell us.

this is what i don't understand...there have been numerous problems, with numerous sales over the last 6 years...and no fixes have ever been implemented (at least that have alleviated the problems)...it just boggles the mind that so many people would run to defend 10c when clearly there has been an issue with ticket sales for many years...and has ironically now reached insane levels of frustration in the "year of the fan"...i think that was stated on one of the round-tables...that is hilarious. 10c had years to get it right, in preparation for PJ20, and what was supposed to be a year-long celebration...and now it has turned into a bitter mess...

very unfortunate indeed...

However, a positive shout out to the 10c for sending me a copy of DEEP magazine after mine got stolen the first time!

dunkman

NothinMan wrote:

I don't work for Ten Club or Crowdsurge, neither do I have any information other than what everyone else has. However, I am an IT Security expert and I can attest to the fact that it is very easy to tell that despite a Denial of Service Attack (which is what this is, if it in fact did occur), there is no evidence credit cards are in danger. These kinds of DOS attacks occur from outside the network and do not require the attackers to have any sort of access to the server above what anyone else has.

why does it take another fan to tell us this? why cant the 10club respond to this instead of hoping a fan might know the answer. :?

Kat

janvanderdam wrote:

I got this message today from Crowdsurge about the credit card details:

We can assure you that there is no security risk.  Had this been the case we would have taken immediate action

I believe the word "hacked" wasn't used by Ten Club so it would be perfectly clear it wasn't a hacking of information. Please contact the Ten Club for confirmation on this if the CrowdSurge comment isn't sufficient.

This will be closed since this has been answered and there is a ticketing discussion thread at viewtopic.php?f=4&t=178855