Fandom Card Issues 2/2012

Biggs · 03-19-2012, 01:18 PM

Quote:

Originally Posted by Pete@BotCon

We verified that the current store in PCI compliant. All of the CC info goes through them.

Pete, if you store secure Credit Card information internally, and print it out. You are not PCI compliant.

...this "current store" nonsense is irrelevant.

You think I want to hand you my credit card details?! You could have Zeus himself standing at your companies front door and I wouldn't care.

Jarodimus · 03-19-2012, 01:21 PM

Quote:

Originally Posted by Pete@BotCon

We verified that the current store is PCI compliant. All of the CC info goes through them.

That's great for the current store.

The info still exists on the old store site. Or at least it did on March 9th, when this admin page was printed out and sent with my order's missing Runabout.

Biggs · 03-19-2012, 01:24 PM

Quote:

Originally Posted by Jarodimus

That's great for the current store.

The info still exists on the old store site. Or at least it did on March 9th, when this admin page was printed out and sent with my order's missing Runabout.

It obviously still exists on their internal system. FunPub still have access to your, and everyone elses secure information internally based on that scan...

Or at least, did up until March 9th as you say...

It's plausable that the new online portal doesn't allow vendor access to NEW data, but they still have access to and would store any OLD data. That's not much of a leap.

Facts are:

FunPub has stored everyones CVV information, which is not PCI compliant
FunPub as of March 9th still had access to, and stored, CVV information
FunPub as of March 9th printed hard-copies of clients secure credit card information, in full, Internally.

Fosterlager · 03-19-2012, 01:27 PM

So I just got an e-mail reminder of my scheduled TCC auto renewal:

Quote:

---------- Forwarded message ----------
From: <Fun@server102.modularmerchant.com>
Date: Mar 19, 2012 1:20 PM
Subject: Transformers or G.I. Joe Collectors' Club Automatic Renewal Coming
To: <[address removed]>
---------------------------------------------------------------------
THIS IS NOT A BILL. THIS IS A REMINDER OF YOUR SCHEDULED TRANSACTION.
---------------------------------------------------------------------
This is a reminder that a transaction for the following items is scheduled to be processed within 15 DAYS. If you have any questions about this upcoming invoice, please contact the Collector Club support at: admin@funpubinc.com.

If you do not have a credit card on file, the system will not renew your membership. Please go to Toyarama.com/store, log in and put a card on file and your membership will automatically renew on your anniversary date.
THE FOLLOWING ITEMS ARE SCHEDULED FOR YOUR ACCOUNT:
---------------------------------------------------------------------
Qty | Price | Bill Date | Product
1 $42.00 04/03/12 12:30pm Transformers Club Third Class Membership (US Domestic)
THIS ORDER WILL BE BILLED TO THE FOLLOWING:
---------------------------------------------------------------------
Foster Stangel
[address removed]
Card Number on file:
THIS MEMBERSHIP WILL BE SHIPPED TO THE FOLLOWING:
---------------------------------------------------------------------

,
---------------------------------------------------------------------
THIS IS NOT A BILL. THIS IS A REMINDER OF YOUR SCHEDULED TRANSACTION.
---------------------------------------------------------------------

Baccala1976 · 03-19-2012, 01:28 PM

They seriously need to delete that old database ASAP. It is completely compromised and is causing them more harm than good right now.

Biggs · 03-19-2012, 01:30 PM

Quote:

Originally Posted by Fosterlager

So I just got an e-mail reminder of my scheduled TCC auto renewal:

...Wait wait. So under the "new website" if you HAD A CARD NUMBER they would've EMAILED it to you?!

Lumpy · 03-19-2012, 01:30 PM

Quote:

Originally Posted by Fosterlager

So I just got an e-mail reminder of my scheduled TCC auto renewal:

is that only if you've logged onto the new temporary store site? there's so many sites going now that i'm confused...

edit: NM, i just logged on, and it looks like it wants to auto renew me as well, but not until March 5th 2013... so i guess that means my membership is good... i already called and confirmed they received my check, and that my account was still in good standing...

Lumpy · 03-19-2012, 01:31 PM

Quote:

Originally Posted by Biggs

...Wait wait. So under the "new website" if you HAD A CARD NUMBER they would've EMAILED it to you?!

i'd assume it'd probably just be the last 4, but Foster will have to confirm...

Biggs · 03-19-2012, 01:35 PM

Quote:

Originally Posted by Lumpy

i'd assume it'd probably just be the last 4, but Foster will have to confirm...

The correct questions are:

a) Why even have that space for Credit Card info there at all?
b) Why even have an 'auto-renew?' function?
c) Why renew?!

...but yeah, I hope it was just the last four digits.

This new store is even less fan-focused than the last, except you might not get your secure card information printed out and handed around the FunPub offices over their lunch break*...

*But remember, they're your friends. So it's cool.

Fosterlager · 03-19-2012, 01:39 PM

Quote:

Originally Posted by Biggs

...Wait wait. So under the "new website" if you HAD A CARD NUMBER they would've EMAILED it to you?!

I don't know what would have shown. Hopefully just the last four digits. I did log into the new site over the weekend in order to confirm they have no card on file.