SD USERS REPORTING CREDIT CARD FRAUD VIA urlhasbeenblocked SHOPPING SITE: 360
Many posts within SlickDeals have multiple threads about fraudulent credit card account transactions occurring within a few weeks of placing an order at urlhasbeenblocked Buy.com. If you have been affected, please post your experience here so the magnitude of urlhasbeenblocked Buy.com's apparent security breach and the impact on the affected urlhasbeenblocked customers may be known. (Please save other issues, either regarding urlhasbeenblocked, or other issues with credit card misuse to other posts.)
If you are one of the affected urlhasbeenblocked customers, please make a post with (1) first date of the fraud transaction and (2) the most recent urlhasbeenblocked.com order date (if there was one).
The most important thing however is to just be counted, if you're one of the affected customers.
urlhasbeenblocked SHOPPING would like to hear from you directly:
*PHONE: Nick Thompson (Head of Customer Experience) 877-880-1030, ext. 2095.
*E-MAIL QUESTIONNAIRE: https://slickdeals.net/forums/showpost.php?p=60106758&postcount=622 -- Dedicated e-mail address
[email protected]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Newspaper & Other Media Reports on this recent urlhasbeenblocked/Buy.com Apparent Security Breach:
Consumer Reports The Consumerist [Jun-6-2013] -- "Here's Everything We Know About The urlhasbeenblocked/Buy.com Credit Card Breaches" -- post by 'steveliv', updated 'daniel32'
http://consumerist.com/2013/06/06/heres-everything-we-know-about-the-rakutenbuy-com-credit-card-breaches/ --and---
http://consumerist.com/2013/06/10...seriously/
New Jersey Record News [May-28-2013] -- "Bogota Police Warn Website Users of Suspicious Charges" -- posted by 'AnnoyedwithRakuten'
http://www.northjersey.com/news/B...l?page=all
Yahoo! Finance & MoneyTalksNews [Jun-6-2013] -- "urlhasbeenblocked.com Customers Reporting Credit Card Fraud" -- txs 'krazyshopper'
http://finance.yahoo.com/news/rak...31825.html and
http://www.moneytalksnews.com/201...ard-fraud/
Gizmodo via RakutenFraud.com [Jun-7-2013] -- "Gizmodo Announces They Will No Longer Post urlhasbeenblocked Deals" -- txs to 'RakutenFraud.com'
http://rakutenfraud.com/2013/06/g...bORZRHn81I
StoreFrontBackTalk [Jun-12-2013] -- "urlhasbeenblocked Breach: Live By The Web, Get Punished By The Web" -- txs to 'RakutenFraud.com'
http://storefrontbacktalk.com/sec...y-the-web/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Summary of the conclusions made by the contributors of this forum:
(1) Identity thieves obtained credit card #'s and SSN #'s from some urlhasbeenblocked Customers
[Ref: News Story & NJ Police Interview
http://www.northjersey.com/news/B...l?page=all -- 'AnnoyedwithRakuten']
[Ref: Additionally
http://www.bergendispatch.com/art...arges.aspx]
[Ref: 'scotthall3411' Post #462, etc.]
(2) Many other users have been affected outside of the SlickDeals community
[Ref: Specialized Site Now Available:
http://rakutenfraud.com/]
(3) The apparent security breach is not limited to just customers who placed orders. Several have reported credit card details were taken from their urlhasbeenblocked My Account screen.
[Ref: 'Cletus81' Post #435, 'missmex1' Post #445]
(4) The apparent security breach was not at the credit card payment processing agent.
[Ref: 'mirai' Post #437]
(5) Customers using credit, debit cards and Gift Cards have been affected.
[Ref: Thread postings and external sites.]
(6) Almost 100% of all fraud reports are from customers who gave urlhasbeenblocked their credit (or debit) card directly (rather than using payment gateways or other payment methods (gift cards, etc.)
[Ref: Thread postings.]
(7) Many customers were able to uniquely identify urlhasbeenblocked as the source of the credit card theft.
[Ref: Many thread postings from customers using a one-time Virtual Credit Card Number, a new credit card only used at urlhasbeenblocked, or a new Gift Card.]
(8) urlhasbeenblocked Buy.com denies that any security breach has occurred, though they are "cooperating with police".
[Ref: News Story & NJ Police Interview
http://www.northjersey.com/news/B...l?page=all -- 'AnnoyedwithRakuten']
(9) Using a Virtual Credit Card Number or Gift Cards at urlhasbeenblocked may not be the best alternative.
[Ref: 'GPz1100' Post #205, Post #447, etc. Several affected customers posted their VCCN's later breach caused the credit card company to reissue a new card.]
[Ref: 'namlook' Post #449, etc. Hacker's later emptied the gift card or sold the balance on eBay.]
[Ref: 'bargainfinder09' Post #449
Must close VCCN out afterwards.]
(10) The apparent security breach still exists at urlhasbeenblocked today, and a urlhasbeenblocked customer order is not required to generate the subsequent CC fraud.
[Ref: 'Edxzxz' Post #583]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please scroll down to the Wiki for important messages from users
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Full Text of the News Story]
New Jersey Record News [May-28-2013] -- "Bogota Police Warn Website Users of Suspicious Charges"
BY DENISA R. SUPERVILLE, STAFF WRITER // Link:
http://www.northjersey.com/news/B...l?page=all
BOGOTA –
"Local police are asking anyone who has used the website urlhasbeenblocked.com, formerly Buy.com, to look out for suspicious charges on their credit cards." The police department started investigating three cases in which residents complained of fraudulent charges on their credit cards and has since discovered five additional victims, including one in New York City, Bogota Detective Sgt. Jonathan Misskerg said Tuesday.
The single thread between the victims is that they have made purchases on urlhasbeenblocked.com in the past three months, police said. The victims' names, Social Security numbers, dates of birth and credit card information were used to open accounts at online equipment suppliers, police said.
The purchases, made at five online stores, included gas valves and warehouse time clocks and totaled around $10,000, Misskerg said. The buyer was traced to an address in Bogotá, Colombia, Misskerg said. After the items were purchased, they were sent to an Englewood company, which then shipped the items to Colombia, Misskerg said. Police declined to identify the Englewood company, saying that the owner was cooperating with authorities and that it remained unclear whether he was part of the scheme. But since investigators first spoke with the company's owner, someone electronically deposited funds in the company owner's account — enough to cover the cost of shipping the items to Colombia, Misskerg said. "We've seized the packages and additional merchandise," Misskerg said Tuesday. "We are going to try to shut him down at this point."
urlhasbeenblocked.com, a Japan-based online retail company completed its purchase of Buy.com, a California-based online market place, in July 2010. The website was rebranded as urlhasbeenblocked.com this year. A company representative said Tuesday that the company had not been contacted by the local police, but that it would cooperate with authorities. "If there is a police investigation, we are not aware of it, and we have not been contacted," said Mark Kirschner, the company's executive officer for global marketing, adding that the company takes such reports "very seriously."
However, an online message board [SlickDeals.net] contains several comments from posters claiming to have used the website and complaining about fraudulent charges on their credit cards. Kirschner said the company was aware of the website and had made overtures, "without success," to those claiming to be affected. He urged those affected to contact the company's head of customer experience at 877-880-1030 ext. 2095. Kirschner said he was unaware of any security breach or hacking incident that could have compromised customers' information.
If anyone suspects that he or she may be a victim of identity theft, he or she should fill out an identity theft report at ftc.gov/idtheft, police advised. After doing so, the individual should take a copy of the report to the local police department and place an initial fraud alert with all three credit bureaus. The investigation was continuing, and as of Tuesday no charges had been filed, police said.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Full Text of the News Story]
Consumer Reports The Consumerist [Jun-6-2013] -- "Here's Everything We Know About The urlhasbeenblocked/Buy.com Credit Card Breaches"
By Laura Northrup // Link:
http://consumerist.com/2013/06/06...-breaches/
Starting about a month ago, rumblings began on the SlickDeals forums among people who had recently made purchases from urlhasbeenblocked Shopping, the new brand name of the marketplace Buy.com.
The purchases made were diverse, ranging from time clocks in Colombia to newspaper subscriptions in Cleveland to plane tickets in Germany. Something is very, very wrong here: hundreds of victims from recent months have come forward on Slickdeals alone.
'
urlhasbeenblocked Shopping is a sort of online mall: the site allows other vendors to set up their own "marketplace" stores and sell items.
Users have reported fraudulent credit card transactions after purchases from a variety of marketplace vendors.
urlhasbeenblocked staff reach out to complainers on Facebook and even on the deal forums, asking victims to call in order to straighten things out.
If they have a solution in progress, urlhasbeenblocked has not let customers know, including victims. While talking too much about it publicly might compromise the investigations,
victims are unhappy that the only thing they've heard from the company is "call us!" to people whose cards have been breached. Apart from the threads on the subject on shopping sites, victims have started their own site, the appropriately-titled RakutenFraud.com.
If having fraudsters make purchases for up to $10,000 on your credit cards isn't scary enough,
the Newark Star-Ledger reports that some victims had new accounts opened up using personal information––their birthdates and Social Security numbers––that you don't need to provide to urlhasbeenblocked as part of a purchase. If you're a victim, what should you do? Contact your credit card company and your local police, of course. You should also contact the merchant where your card was used: after all, they're a victim too.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
SLICKDEALS USER NAMES WHO REPORTED CREDIT CARD FRAUD AFTER A urlhasbeenblocked ORDER
- rrmoore
- tprevett
- motorolaX
- rebutiw
- cpeed
- jastisatya
- rbcrewser
- avishah
- koyhbae
- avatar13
- sakdeals
- Udis
- slinson
- hagure
- Amaylin
- jbiz
- fatt1974
- Friend of Sonic
- Missiethegal
- bonkman
- Marekv
- chote
- guyver2077
- rarmortn
- jefflam79
- drydeniv
- wezlypipz
- shahhet2
- keeplow.com
- cindyc1122
- kevinca
- chihuahua8383
- small_stuff03
- ek9cv5
- jmgjj
- deaconx31
- virbla
- lds322
- vsspam
- dealjourney
- villageidiot
- sproqit
- mrstak
- Ichen5
- nitish
- bigboco
- igorjrr
- Argantes
- HJFarnsworth
- vapers
- subpar101
- ktatka13
- callsoldier83
- speedyg
- jump4deal
- daniel32
- victoras
- Cptobvious
- blueskiesnh20
- buyforsalemit
- HockeyPuck16
- dealinneed
- bigdeal5189
- Zelucifer
- jho
- nismo13GTiR
- Newnameforme
- Tennisjon2002
- killab77
- dogert
- SDRebel
- xthundaz
- Link2999
- guy_on_The_sofa
- DraftBuyer
- tortoise
- isokramer
- shreyasr
- doctaFingaz
- lotsalotsadeals
- scotthall3411
- 68droptop
- tda388
- azisme
- haggle_master
- wjc
- nyarrow
- DavidandDenise
- mustsav3
- aerofreaky11
- 68droptop
- yuchar168
- singal3
- ceelove
- Atari
- adanyc
- dirtmaster
- FlyingNun
- CBdelta
- sindeko
- rexb
- peteh555
- sumo28
- DMUE
- tortoise
- mirai
- thoror
- jcrash
- HDTiVoFan
- jcknows0
- abels
- Satsusi
- AnnoyedWithRakuten
- DPackMan
- cleaver
- mattsgarage
- nksnk
- wand
- j1huynh
- zetasoul
- highland1024
- Sam-Heek
- sightlessnet
- baxao1
- binji
- robinski_
- faiz_23
- gazr
- dealer007
- nikla
- bnizzle
- tarzan1234
- BadBrent
- yuchar168
- marlin29311
- xseanx
- kachelma
- psychojinx
- c627627
- snknk
- morpheus282
- coolcyber
- syncros123
- thriftyscrooge
- tialfred1
- semifast
- suril
- namlook
- hou1960
- jll544
- bongchoi21
- pjdavep
- dholu
- kskreider
- trencher7
- ohhyeeaahh
- oracleprogrammr
- KimmyKim
- anup_c_21
- theturnmaster
- jerry520ever
- supacala
- rite237
- richman
- singingintherain
- un_plug
- asdfghasdfgh
- rbv_shard
- NY2008
- nevermindvicky
- darkonex
- MonkeyChops
- mehrab012
- Badronald
- trueman1xfz
- TuncerY
- andychoi
- Chuggington
- drucula
- wquach
- HkB
- CheapBastardX10
- sky0102
- AkumaX
- attmci
- vodanh1982
- Tintinet
- k9homan
- diytech123
- kjmott
- mf6764
- thewatcher07
- cnewsgrp
- goldenone23
- bossusa
- Carkis
- ohhgourami
- cmm0325
- omendt
- ducky2802
- SlikRick
- teja9999
- kevvinz
- TP78
- shahnm
- DiabolicPumpkin
- blackoper
- gryphus
- mimi_mechant
- JoshMcMadMac
- bkiserx7
- EricW4226
- gimmie
- ghost5189
- sandman8288
- miziyuan
- rbreding
- JackDough
- Evenstar979
- Cletus81
- ecf
- bargainfinder09
- missmex1
- Chris29
- xiesanshao
- RoundSparrow
- bpp
- Krystm
- WhiteShadow1
- ilyap30
- bijju
- stingraysix
- santiagoanders
- compuguy1088
- photo00001
- Devius1
- parasitemite
- Princeton85
- contraium
- JavierH
- girishvk
- OnlyDealz
- elslicko
- Reallynotnick
- ieclipsie
- john_kc
- icdedppl
- knightracer
- scoutconnor
- silverforumsurf
- cazicthule
- mister_x
- produke
- minhquan2106
- FayEvelynSchlob
- Zechs19
- peterstevens
- TXGoat
- gbkims
- anzix
- pbmpharmacist
- Edxzxz
- bbf
- anakha
- vanburen0875
- sklar
- Funkorama
- lukeS1969
- twhite91
- vailr
- 1111111111
- SinceCCF
- LandonsDad
- ewiz77
- o0SlickMaster0o
- fvpawli
- kevin2011
- DocMo
- PharAway
- misterpooter
- kankri99
- skv
- mychaelp
- DaMostUnknown
- klatka13
- magicfame
- PokerKnight
- odysseyelite
- majorjohn
- taimeili123
- IlikeSD
- chis101
- amdk9
- chener
- jayhsu
- randalsw
- GottaLoveAZ
- BSoares
- fedechat
- DrunkenSoul
- turbobuick86
- viper87227
- BigChiefTaco
- HOO-MAN?
- HeavenlySkies
- TiredDog
- dipperq
- zaku178
- VirginiaBob
- ilya980
- rigamortis
- Genius4sho
- epicd2012
- thekedar
- drinkingbird
- djkyle65c
- peanut932
- plastik3000
- dersimden
- MarcSparks
- kxc262
- xtrabad
- yourownhero
- rebo0t
- ewh2002
- Chai
- finnadat
- MichaelM7154
- sleddie
- pood
- lampakky
- blueiegod
- spyderfang
- monster888
- hantidam
- nilmot
- dokiant
- Ashane
- dezenutz
- blazin-asian
- crocodile
- roleypoleyfoley
- alexboroda
- Ray97
- echostorm
- supercopofhongkong
- Not_TooBad
- gascolator
- kingkong79
- pprichar
- hezza8
- shootkey
- farewellwilliams
- senrab
- flyingturtle88
- whiba
- reposter432
- jackface
- CompulsiveBuyer
- UniqueUserNameHere
924 Comments
Your comment cannot be blank.
Sign up for a Slickdeals account to remove this ad.
urlhasbeenblocked reveals trust is key to competing beyond price online
http://launch.it/launch/urlhasbeenblocked-r...ce-online/
http://www.ncsl.org/issues-resear...-laws.aspx
so, if what we suspect has happened has indeed happened, then notification should be coming very soon. It looks like some states allow for a delay in notification if requested by law enforcement; otherwise, they require the notice be provided "as soon as practicable and without unreasonable delay", or similar language.
California has a site about data breaches:
http://oag.ca.gov/ecrime/databreach/reporting
http://oag.ca.gov/ecrime/databreach/list
Sorry for the double post earlier. Not sure how.
(Source: http://www.consumeraff
"I had purchased some items with buy.com and both times I used my debit card. And the 1st time I used buy.com, someone got ahold of my debit card information and used it to buy iTunes from Apple. So I, not knowing who got a hold of my credit card, immediately had my card cancelled. So after having my card cancelled and getting a new card number, I know no one has my number. So I made another purchase on buy.com several weeks ago, and just yesterday, I tried to withdraw some money out of my account and I couldn't because a large purchase has been made by Macy's.com and I don't make no large purchase from no store or no online store. So I'm very very very very pissed because now I know where those purchases came from on my debit card. I will never never again purchase from buy.com or any online stores ever again. Buy.com is a crook, so please don't buy anything online from buy.com. Shame on you guys."
Sign up for a Slickdeals account to remove this ad.
http://www.the-digital-reader.com...Z2
Earliest is March 21 !
As news spreads, more people are coming forward to say that they too had false charges on their credit cards following a urlhasbeenblocked Buy.com order. I see that urlhasbeenblocked's Facebook page is lighting up too from disgusted customers who absolutely couldn't believe that this could happen to them as a result of buying from a larger company. urlhasbeenblocked continues to demonstrate a "we don't care" after-sales attitude. Their reluctance to come-clean and announce the breach may suggest that it may not be a technological breach but rather a human breach of their internal databases caused by an internal employee with greedy and malicious intentions. Full credit card information need not be stored and available for employees to see. That process should be fully computerized with the human element taken out of the equation. urlhasbeenblocked, a personal security breach is worth more than a $10 coupon! Sadly, the marketing department at urlhasbeenblocked hasn't yet realized the long-term impact on current and prospective customers and merchants who may associate the urlhasbeenblocked name with the worry and long-term concern of their personal credit security.
What are the chances we can get this thread moved someplace where everybody can see it, rather then buried in the Deal Talk forum. I still see people making purchases from urlhasbeenblocked via hot deal threads here on slickdeals.. maybe even something on the main page? Is it possible to get the link to the urlhasbeenblocked storefront removed from the front page until the problem is addressed and fixed? It is very apparent that the issues at urlhasbeenblocked still exist. This has become more of a consumer alert rather then a deal talk, and should really be front and center!
I was about to make a purchase this morning from urlhasbeenblocked and luckily found this thread. I will now avoid this fraudulent company for the rest of my life. Sounds like the fraud affects thousands of customers, and they have let it continue.
http://secure.urlhasbeenblocked.
I'm pretty sure I clicked on that link. But aren't secure sections of sites supposed to be HTTPS and not HTTP? The message definitely was from urlhasbeenblocked and not a phish attempt. The link did go to urlhasbeenblocked's site and not somewhere trying to be urlhasbeenblocked. But if they are sending customers to an unsecure section, could this be how my credit card number got taken through them?
Edit- I just clicked the link again and the address gets automatically converted to https:// so perhaps that is not the way they did it.
Sign up for a Slickdeals account to remove this ad.