SD USERS REPORTING CREDIT CARD FRAUD VIA urlhasbeenblocked SHOPPING SITE: 360
Many posts within SlickDeals have multiple threads about fraudulent credit card account transactions occurring within a few weeks of placing an order at urlhasbeenblocked Buy.com. If you have been affected, please post your experience here so the magnitude of urlhasbeenblocked Buy.com's apparent security breach and the impact on the affected urlhasbeenblocked customers may be known. (Please save other issues, either regarding urlhasbeenblocked, or other issues with credit card misuse to other posts.)
If you are one of the affected urlhasbeenblocked customers, please make a post with (1) first date of the fraud transaction and (2) the most recent urlhasbeenblocked.com order date (if there was one).
The most important thing however is to just be counted, if you're one of the affected customers.
urlhasbeenblocked SHOPPING would like to hear from you directly:
*PHONE: Nick Thompson (Head of Customer Experience) 877-880-1030, ext. 2095.
*E-MAIL QUESTIONNAIRE: https://slickdeals.net/forums/showpost.php?p=60106758&postcount=622 -- Dedicated e-mail address
[email protected]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Newspaper & Other Media Reports on this recent urlhasbeenblocked/Buy.com Apparent Security Breach:
Consumer Reports The Consumerist [Jun-6-2013] -- "Here's Everything We Know About The urlhasbeenblocked/Buy.com Credit Card Breaches" -- post by 'steveliv', updated 'daniel32'
http://consumerist.com/2013/06/06/heres-everything-we-know-about-the-rakutenbuy-com-credit-card-breaches/ --and---
http://consumerist.com/2013/06/10...seriously/
New Jersey Record News [May-28-2013] -- "Bogota Police Warn Website Users of Suspicious Charges" -- posted by 'AnnoyedwithRakuten'
http://www.northjersey.com/news/B...l?page=all
Yahoo! Finance & MoneyTalksNews [Jun-6-2013] -- "urlhasbeenblocked.com Customers Reporting Credit Card Fraud" -- txs 'krazyshopper'
http://finance.yahoo.com/news/rak...31825.html and
http://www.moneytalksnews.com/201...ard-fraud/
Gizmodo via RakutenFraud.com [Jun-7-2013] -- "Gizmodo Announces They Will No Longer Post urlhasbeenblocked Deals" -- txs to 'RakutenFraud.com'
http://rakutenfraud.com/2013/06/g...bORZRHn81I
StoreFrontBackTalk [Jun-12-2013] -- "urlhasbeenblocked Breach: Live By The Web, Get Punished By The Web" -- txs to 'RakutenFraud.com'
http://storefrontbacktalk.com/sec...y-the-web/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Summary of the conclusions made by the contributors of this forum:
(1) Identity thieves obtained credit card #'s and SSN #'s from some urlhasbeenblocked Customers
[Ref: News Story & NJ Police Interview
http://www.northjersey.com/news/B...l?page=all -- 'AnnoyedwithRakuten']
[Ref: Additionally
http://www.bergendispatch.com/art...arges.aspx]
[Ref: 'scotthall3411' Post #462, etc.]
(2) Many other users have been affected outside of the SlickDeals community
[Ref: Specialized Site Now Available:
http://rakutenfraud.com/]
(3) The apparent security breach is not limited to just customers who placed orders. Several have reported credit card details were taken from their urlhasbeenblocked My Account screen.
[Ref: 'Cletus81' Post #435, 'missmex1' Post #445]
(4) The apparent security breach was not at the credit card payment processing agent.
[Ref: 'mirai' Post #437]
(5) Customers using credit, debit cards and Gift Cards have been affected.
[Ref: Thread postings and external sites.]
(6) Almost 100% of all fraud reports are from customers who gave urlhasbeenblocked their credit (or debit) card directly (rather than using payment gateways or other payment methods (gift cards, etc.)
[Ref: Thread postings.]
(7) Many customers were able to uniquely identify urlhasbeenblocked as the source of the credit card theft.
[Ref: Many thread postings from customers using a one-time Virtual Credit Card Number, a new credit card only used at urlhasbeenblocked, or a new Gift Card.]
(8) urlhasbeenblocked Buy.com denies that any security breach has occurred, though they are "cooperating with police".
[Ref: News Story & NJ Police Interview
http://www.northjersey.com/news/B...l?page=all -- 'AnnoyedwithRakuten']
(9) Using a Virtual Credit Card Number or Gift Cards at urlhasbeenblocked may not be the best alternative.
[Ref: 'GPz1100' Post #205, Post #447, etc. Several affected customers posted their VCCN's later breach caused the credit card company to reissue a new card.]
[Ref: 'namlook' Post #449, etc. Hacker's later emptied the gift card or sold the balance on eBay.]
[Ref: 'bargainfinder09' Post #449
Must close VCCN out afterwards.]
(10) The apparent security breach still exists at urlhasbeenblocked today, and a urlhasbeenblocked customer order is not required to generate the subsequent CC fraud.
[Ref: 'Edxzxz' Post #583]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please scroll down to the Wiki for important messages from users
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Full Text of the News Story]
New Jersey Record News [May-28-2013] -- "Bogota Police Warn Website Users of Suspicious Charges"
BY DENISA R. SUPERVILLE, STAFF WRITER // Link:
http://www.northjersey.com/news/B...l?page=all
BOGOTA –
"Local police are asking anyone who has used the website urlhasbeenblocked.com, formerly Buy.com, to look out for suspicious charges on their credit cards." The police department started investigating three cases in which residents complained of fraudulent charges on their credit cards and has since discovered five additional victims, including one in New York City, Bogota Detective Sgt. Jonathan Misskerg said Tuesday.
The single thread between the victims is that they have made purchases on urlhasbeenblocked.com in the past three months, police said. The victims' names, Social Security numbers, dates of birth and credit card information were used to open accounts at online equipment suppliers, police said.
The purchases, made at five online stores, included gas valves and warehouse time clocks and totaled around $10,000, Misskerg said. The buyer was traced to an address in Bogotá, Colombia, Misskerg said. After the items were purchased, they were sent to an Englewood company, which then shipped the items to Colombia, Misskerg said. Police declined to identify the Englewood company, saying that the owner was cooperating with authorities and that it remained unclear whether he was part of the scheme. But since investigators first spoke with the company's owner, someone electronically deposited funds in the company owner's account — enough to cover the cost of shipping the items to Colombia, Misskerg said. "We've seized the packages and additional merchandise," Misskerg said Tuesday. "We are going to try to shut him down at this point."
urlhasbeenblocked.com, a Japan-based online retail company completed its purchase of Buy.com, a California-based online market place, in July 2010. The website was rebranded as urlhasbeenblocked.com this year. A company representative said Tuesday that the company had not been contacted by the local police, but that it would cooperate with authorities. "If there is a police investigation, we are not aware of it, and we have not been contacted," said Mark Kirschner, the company's executive officer for global marketing, adding that the company takes such reports "very seriously."
However, an online message board [SlickDeals.net] contains several comments from posters claiming to have used the website and complaining about fraudulent charges on their credit cards. Kirschner said the company was aware of the website and had made overtures, "without success," to those claiming to be affected. He urged those affected to contact the company's head of customer experience at 877-880-1030 ext. 2095. Kirschner said he was unaware of any security breach or hacking incident that could have compromised customers' information.
If anyone suspects that he or she may be a victim of identity theft, he or she should fill out an identity theft report at ftc.gov/idtheft, police advised. After doing so, the individual should take a copy of the report to the local police department and place an initial fraud alert with all three credit bureaus. The investigation was continuing, and as of Tuesday no charges had been filed, police said.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Full Text of the News Story]
Consumer Reports The Consumerist [Jun-6-2013] -- "Here's Everything We Know About The urlhasbeenblocked/Buy.com Credit Card Breaches"
By Laura Northrup // Link:
http://consumerist.com/2013/06/06...-breaches/
Starting about a month ago, rumblings began on the SlickDeals forums among people who had recently made purchases from urlhasbeenblocked Shopping, the new brand name of the marketplace Buy.com.
The purchases made were diverse, ranging from time clocks in Colombia to newspaper subscriptions in Cleveland to plane tickets in Germany. Something is very, very wrong here: hundreds of victims from recent months have come forward on Slickdeals alone.
'
urlhasbeenblocked Shopping is a sort of online mall: the site allows other vendors to set up their own "marketplace" stores and sell items.
Users have reported fraudulent credit card transactions after purchases from a variety of marketplace vendors.
urlhasbeenblocked staff reach out to complainers on Facebook and even on the deal forums, asking victims to call in order to straighten things out.
If they have a solution in progress, urlhasbeenblocked has not let customers know, including victims. While talking too much about it publicly might compromise the investigations,
victims are unhappy that the only thing they've heard from the company is "call us!" to people whose cards have been breached. Apart from the threads on the subject on shopping sites, victims have started their own site, the appropriately-titled RakutenFraud.com.
If having fraudsters make purchases for up to $10,000 on your credit cards isn't scary enough,
the Newark Star-Ledger reports that some victims had new accounts opened up using personal information––their birthdates and Social Security numbers––that you don't need to provide to urlhasbeenblocked as part of a purchase. If you're a victim, what should you do? Contact your credit card company and your local police, of course. You should also contact the merchant where your card was used: after all, they're a victim too.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
SLICKDEALS USER NAMES WHO REPORTED CREDIT CARD FRAUD AFTER A urlhasbeenblocked ORDER
- rrmoore
- tprevett
- motorolaX
- rebutiw
- cpeed
- jastisatya
- rbcrewser
- avishah
- koyhbae
- avatar13
- sakdeals
- Udis
- slinson
- hagure
- Amaylin
- jbiz
- fatt1974
- Friend of Sonic
- Missiethegal
- bonkman
- Marekv
- chote
- guyver2077
- rarmortn
- jefflam79
- drydeniv
- wezlypipz
- shahhet2
- keeplow.com
- cindyc1122
- kevinca
- chihuahua8383
- small_stuff03
- ek9cv5
- jmgjj
- deaconx31
- virbla
- lds322
- vsspam
- dealjourney
- villageidiot
- sproqit
- mrstak
- Ichen5
- nitish
- bigboco
- igorjrr
- Argantes
- HJFarnsworth
- vapers
- subpar101
- ktatka13
- callsoldier83
- speedyg
- jump4deal
- daniel32
- victoras
- Cptobvious
- blueskiesnh20
- buyforsalemit
- HockeyPuck16
- dealinneed
- bigdeal5189
- Zelucifer
- jho
- nismo13GTiR
- Newnameforme
- Tennisjon2002
- killab77
- dogert
- SDRebel
- xthundaz
- Link2999
- guy_on_The_sofa
- DraftBuyer
- tortoise
- isokramer
- shreyasr
- doctaFingaz
- lotsalotsadeals
- scotthall3411
- 68droptop
- tda388
- azisme
- haggle_master
- wjc
- nyarrow
- DavidandDenise
- mustsav3
- aerofreaky11
- 68droptop
- yuchar168
- singal3
- ceelove
- Atari
- adanyc
- dirtmaster
- FlyingNun
- CBdelta
- sindeko
- rexb
- peteh555
- sumo28
- DMUE
- tortoise
- mirai
- thoror
- jcrash
- HDTiVoFan
- jcknows0
- abels
- Satsusi
- AnnoyedWithRakuten
- DPackMan
- cleaver
- mattsgarage
- nksnk
- wand
- j1huynh
- zetasoul
- highland1024
- Sam-Heek
- sightlessnet
- baxao1
- binji
- robinski_
- faiz_23
- gazr
- dealer007
- nikla
- bnizzle
- tarzan1234
- BadBrent
- yuchar168
- marlin29311
- xseanx
- kachelma
- psychojinx
- c627627
- snknk
- morpheus282
- coolcyber
- syncros123
- thriftyscrooge
- tialfred1
- semifast
- suril
- namlook
- hou1960
- jll544
- bongchoi21
- pjdavep
- dholu
- kskreider
- trencher7
- ohhyeeaahh
- oracleprogrammr
- KimmyKim
- anup_c_21
- theturnmaster
- jerry520ever
- supacala
- rite237
- richman
- singingintherain
- un_plug
- asdfghasdfgh
- rbv_shard
- NY2008
- nevermindvicky
- darkonex
- MonkeyChops
- mehrab012
- Badronald
- trueman1xfz
- TuncerY
- andychoi
- Chuggington
- drucula
- wquach
- HkB
- CheapBastardX10
- sky0102
- AkumaX
- attmci
- vodanh1982
- Tintinet
- k9homan
- diytech123
- kjmott
- mf6764
- thewatcher07
- cnewsgrp
- goldenone23
- bossusa
- Carkis
- ohhgourami
- cmm0325
- omendt
- ducky2802
- SlikRick
- teja9999
- kevvinz
- TP78
- shahnm
- DiabolicPumpkin
- blackoper
- gryphus
- mimi_mechant
- JoshMcMadMac
- bkiserx7
- EricW4226
- gimmie
- ghost5189
- sandman8288
- miziyuan
- rbreding
- JackDough
- Evenstar979
- Cletus81
- ecf
- bargainfinder09
- missmex1
- Chris29
- xiesanshao
- RoundSparrow
- bpp
- Krystm
- WhiteShadow1
- ilyap30
- bijju
- stingraysix
- santiagoanders
- compuguy1088
- photo00001
- Devius1
- parasitemite
- Princeton85
- contraium
- JavierH
- girishvk
- OnlyDealz
- elslicko
- Reallynotnick
- ieclipsie
- john_kc
- icdedppl
- knightracer
- scoutconnor
- silverforumsurf
- cazicthule
- mister_x
- produke
- minhquan2106
- FayEvelynSchlob
- Zechs19
- peterstevens
- TXGoat
- gbkims
- anzix
- pbmpharmacist
- Edxzxz
- bbf
- anakha
- vanburen0875
- sklar
- Funkorama
- lukeS1969
- twhite91
- vailr
- 1111111111
- SinceCCF
- LandonsDad
- ewiz77
- o0SlickMaster0o
- fvpawli
- kevin2011
- DocMo
- PharAway
- misterpooter
- kankri99
- skv
- mychaelp
- DaMostUnknown
- klatka13
- magicfame
- PokerKnight
- odysseyelite
- majorjohn
- taimeili123
- IlikeSD
- chis101
- amdk9
- chener
- jayhsu
- randalsw
- GottaLoveAZ
- BSoares
- fedechat
- DrunkenSoul
- turbobuick86
- viper87227
- BigChiefTaco
- HOO-MAN?
- HeavenlySkies
- TiredDog
- dipperq
- zaku178
- VirginiaBob
- ilya980
- rigamortis
- Genius4sho
- epicd2012
- thekedar
- drinkingbird
- djkyle65c
- peanut932
- plastik3000
- dersimden
- MarcSparks
- kxc262
- xtrabad
- yourownhero
- rebo0t
- ewh2002
- Chai
- finnadat
- MichaelM7154
- sleddie
- pood
- lampakky
- blueiegod
- spyderfang
- monster888
- hantidam
- nilmot
- dokiant
- Ashane
- dezenutz
- blazin-asian
- crocodile
- roleypoleyfoley
- alexboroda
- Ray97
- echostorm
- supercopofhongkong
- Not_TooBad
- gascolator
- kingkong79
- pprichar
- hezza8
- shootkey
- farewellwilliams
- senrab
- flyingturtle88
- whiba
- reposter432
- jackface
- CompulsiveBuyer
- UniqueUserNameHere
924 Comments
Your comment cannot be blank.
Sign up for a Slickdeals account to remove this ad.
https://slickdeals.net/f/3060499-Buy-com-Connect3D-Class-Action-Lawsuit?v=1
http://www.fatwallet.c
Bought a year subscription probably.
Sign up for a Slickdeals account to remove this ad.
By Wed May 23, my Visa was blocked and had to call.
Cradit Card security dept asked if I placed the order from urlhasbeenblocked.
Can someone clarify, when you use V.me vs. directly giving credit card info to urlhasbeenblocked - is the risk the same?
https://slickdeals.net/f/3060499-Buy-com-Connect3D-Class-Action-Lawsuit?v=1
http://www.fatwallet.c
Plus, personally I have bought from Buy.com multiple times before. They had some dishonest partners for sure. I bought a GPS and a Tablet from their partners through Buy.com web site, priced for Brand new, but the sellers sent me used ones, without bothering to clean them up. So I called Buy.com, and complained. In Both cases, I returned at their/sellers cost, and got the full refund.
That said, I only bought 1-2 times after Japanese acquired this company. So far, no Fraudulence showing up.
Looks almost ALL the complains are from recent purchases. Keep in mind, Japanese just becomes the New Owner of this company from late 2010!
http://en.wikipedia.or
http://en.wikipedia.or
As news spreads, more people are coming forward to say that they too had false charges on their credit cards following a urlhasbeenblocked Buy.com order. I see that urlhasbeenblocked's Facebook page is lighting up too from disgusted customers who absolutely couldn't believe that this could happen to them as a result of buying from a larger company. urlhasbeenblocked continues to demonstrate a "we don't care" after-sales attitude. Their reluctance to come-clean and announce the breach may suggest that it may not be a technological breach but rather a human breach of their internal databases caused by an internal employee with greedy and malicious intentions. Full credit card information need not be stored and available for employees to see. That process should be fully computerized with the human element taken out of the equation. urlhasbeenblocked, a personal security breach is worth more than a $10 coupon! Sadly, the marketing department at urlhasbeenblocked hasn't yet realized the long-term impact on current and prospective customers and merchants who may associate the urlhasbeenblocked name with the worry and long-term concern of their personal credit security.
Sign up for a Slickdeals account to remove this ad.
By Wed May 23, my Visa was blocked and had to call.
Cradit Card security dept asked if I placed the order from urlhasbeenblocked.
Can someone clarify, when you use V.me vs. directly giving credit card info to urlhasbeenblocked - is the risk the same?
(Q1) Are you absolutely sure that the credit card # was not stored (at the time, or anytime previously) in your "My Account" at urlhasbeenblocked?
(Q2) Are you sure that you didn't first put the credit card info in the order screen and then remove it to then use V.me?
My reasons for asking these two questions are:
(Re: Q1)
A few people have suggested that the security breach may go beyond those who placed orders and also be with those who stored the credit card on-file at some previous time. (If true, that might suggest that backup media could have been breached.) If you at one time in the past used that card # directly at urlhasbeenblocked, but didn't have it stored in your 'My Account', is it possible for someone to see that card # (or a portion of that card #, or that card type) from within urlhasbeenblocked's Order History? For example, if Order History shows "Chase Visa xxxx-1234", is it possible (with the other info they've taken about you) that they were able to get the rest of the card # by pretending to be you in contact with Chase? (I'm just trying to help with an answer as I would think it would be virtually impossible for a successful assault on V.me, PayPal or other, unless they were able to somehow convince V.me that they were you and lost their password.)
(Re: Q2)
One person did that and mentioned something about urlhasbeenblocked continuing to store or hold the card information in browser cache or within urlhasbeenblocked's system.