WARNING: TFSOURCE account billing info compromised! (May 2011)

DarthMagnificus · 01-07-2010, 03:53 AM

I have been dealing with paypal tonite with a slew of unauthorized credit card purchases...end result...i updated my billing info on NOV of last year with TFsource with a paypal multiuse credit card # ...someone got that # and sent crazy with Itunes and other companies...just a heads up that folks might want to check their statements for any unauthorized purchases...i sent a email to TFSOURCE about this...

i have never used my account (paypal or TFSOURCE) on any other computers other than my own...i believe someone got this credit card # via this company as it is the only credit card on file with this company and this company only...

not making accusations about a company or employees but just want folks to avoid this crap and all the wasted phone calls i have had to make.

STAFF EDIT: Update from Curt, Owner of TFSource.

Quote:

Originally Posted by endemion28

Hi All -

We appreciate this being brought to our attention right away. We've been working on this diligently and have implemented several other security precautions on our site immediately regardless of the route cause of the issue. Anyone who feels they may have been compromised, or wants us to delete their card information, is more than willing to email us and we'll be happy to do so. At the same time I want to let all know that I am confident in the security of the site, and even my information is registered on TFsource.

Regarding credit card data, it's not stored on TFSource, it is stored on a secure 3rd party's site, one that hosts many famous and household name sites, that's why we selected this resource. It's always possible a section of their data has been compromised but we have not been notified as such.

Regarding access to this data, no one at TFsource has this access, except for me, and rest assured I am not using anyone's data to make fraudulent purchases as TFsource has always had a high level of integrity and that's not something that we're going to change.

Anyone that feels they have had information compromised as a result of our site, or even potentially is more than welcome to email me directly. We've been working all morning with our coding team working full force on looking at any potential security issues, and will work to ensure everyone's information is safe and secure when accessing TFsource now and in the future.

Thanks,
Curt

Scantron · 01-07-2010, 07:23 AM

VERY glad I saw this thread. I checked my credit card online this morning and noticed I had a pending charge for $1 from "APL Itunes" and knew it wasn't mine (I don't use iTunes), so I had my card cancelled for fraud and am getting a new one. I can't decisively conclude it was TFSource in my case, since I use my card online for Amazon, BBTS and a few other places, but it seems like too much of a coincidence to be otherwise.

Check your statements, everyone.

DeathStorm · 01-07-2010, 07:37 AM

First off, welcome to the boards. Second, thanks for the warning - I too have three itunes charges on my account. I also have my card registered on several sites so those will be updated shortly - TFSource is one of them.

DarthMagnificus · 01-07-2010, 07:47 AM

in my case TFSOURCE is the only place that had this credit card stored...and the CC # was generated way back on NOV 14th when i placed a preorder for the henkei jetfire.

I am sorry to see that others have been hit..but it seems probably more folks will see stuff as the day progresses...

ryan.j · 01-07-2010, 07:54 AM

so just to clarify, paypal and regular CCs have been hit?

also: FFS :/

adamthered · 01-07-2010, 07:59 AM

Why do these thieving bastards alway go the iTunes? Last time I had my information stolen, about two years ago, there was an iTunes charge. What is it about iTunes that draws them there?

Scantron · 01-07-2010, 08:00 AM

Quote:

Originally Posted by ryan.j

so just to clarify, paypal and regular CCs have been hit?

also: FFS :/

Mine was a regular credit card, so it seems like it.

ryan.j · 01-07-2010, 08:04 AM

they've got my shiz on record so i pinged TFSOURCE a message via their webpage, asking if they were aware of teh problem and linking them to this thread. hopefully they'll be able to shed some light on the situation.

Quote:

Originally Posted by adamthered

Why do these thieving bastards alway go the iTunes? Last time I had my information stolen, about two years ago, there was an iTunes charge. What is it about iTunes that draws them there?

run through a small sum to see if the card number works and if it's detected, then buy something big at a later date if it isn't? if people don't check their cards then there is every chance you'll get away with something delivered to a physical address, if they do check the card and kill it then itunes is fairly anonymous as these things go.

Wajo357 · 01-07-2010, 08:14 AM

confirmed... I got an email from Capital One about the itunes and canceled the card and am getting a new one. However, I have a pending order with TFSource. Should I not update the CC info and try to cancel the order? I don't want this happening again...

I was wondering how they got the CC.

Wajo357 · 01-07-2010, 08:17 AM

This should really be front-paged since they are a sponsor to the site and many people might not catch the $1 difference. Credit Card fraud is extremely serious, hopefully the admins do the right thing...

This should be elevated.

01-07-2010, 07:37 AM	#3
DeathStorm Snoogins Join Date: Jul 2005 Posts: 2,510 Location: Columbus, OH Collection Count: That many. News Credits: 1	First off, welcome to the boards. Second, thanks for the warning - I too have three itunes charges on my account. I also have my card registered on several sites so those will be updated shortly - TFSource is one of them. Death metal: making moms say "WTF?" since 1986! Last edited by DeathStorm; 01-07-2010 at 03:21 PM..

01-07-2010, 07:54 AM	#5
ryan.j Terrorcon Join Date: Sep 2009 Posts: 1,556 Location: UK	so just to clarify, paypal and regular CCs have been hit? also: FFS :/ feedback

01-07-2010, 08:14 AM	#9
Wajo357 Terrorcon Join Date: May 2004 Posts: 1,616 Location: Teaneck, NJ News Credits: 7	confirmed... I got an email from Capital One about the itunes and canceled the card and am getting a new one. However, I have a pending order with TFSource. Should I not update the CC info and try to cancel the order? I don't want this happening again... I was wondering how they got the CC. Sig pictures are to be no larger than 40KB in file size and should be no larger than 300 pixels in height and 500 pixels wide - 2005 Staff NEW Collection Thread here. (Updated: 05/27/09) Items for Sale. My Wishlist. Feedback: TFW2005 eBay

01-07-2010, 08:17 AM	#10
Wajo357 Terrorcon Join Date: May 2004 Posts: 1,616 Location: Teaneck, NJ News Credits: 7	This should really be front-paged since they are a sponsor to the site and many people might not catch the $1 difference. Credit Card fraud is extremely serious, hopefully the admins do the right thing... This should be elevated. Sig pictures are to be no larger than 40KB in file size and should be no larger than 300 pixels in height and 500 pixels wide - 2005 Staff NEW Collection Thread here. (Updated: 05/27/09) Items for Sale. My Wishlist. Feedback: TFW2005 eBay

01-07-2010, 07:23 AM	#2
Scantron TFW's Asexiest Member Join Date: Oct 2004 Posts: 8,248 Location: Kiss her where it smells - Pittsburgh Collection Count: 500+ News Credits: 3	VERY glad I saw this thread. I checked my credit card online this morning and noticed I had a pending charge for $1 from "APL Itunes" and knew it wasn't mine (I don't use iTunes), so I had my card cancelled for fraud and am getting a new one. I can't decisively conclude it was TFSource in my case, since I use my card online for Amazon, BBTS and a few other places, but it seems like too much of a coincidence to be otherwise. Check your statements, everyone.

01-07-2010, 07:47 AM	#4
DarthMagnificus Banned Join Date: Jan 2010 Posts: 675	in my case TFSOURCE is the only place that had this credit card stored...and the CC # was generated way back on NOV 14th when i placed a preorder for the henkei jetfire. I am sorry to see that others have been hit..but it seems probably more folks will see stuff as the day progresses...

01-07-2010, 07:59 AM	#6
adamthered Reads comics. Starts shit Join Date: Jul 2002 Posts: 4,333 Location: Minneapolis, MN Collection Count: 737 Almost Everyday! News Credits: 2	Why do these thieving bastards alway go the iTunes? Last time I had my information stolen, about two years ago, there was an iTunes charge. What is it about iTunes that draws them there?