Hasbro Communication Regarding TFCC Security Issue

Add me to the list who has a strange pending sale on CC. I was one of the first to order from TFCC before the crash. It's a $1 Google charge which I don't know what it could be.

Bad news. Seriously, don't wait and call your CC company as soon as possible... This could well be a CC hacker testing your card.

Oh yeah, already on it. This hobby is becoming more of a job than I'd like it to be.

That happens sometimes when you buy gas. So it might have been that. Keeping finger crossed that is what it was.

I am getting some nice ass figures here, just sucks that they have the added benefit of having to look at my CC every day or so just to see if I have been taken.

That was my first reaction to it too, but like many I keep a close watch on my statement on a daily basis. I saw all my gas charges and other routine purchases like that and the $1 GOOGLE charge didn't fit. Regardless, I canceled the card for safe measure and will have a new one next week.

Welcome to the club. I got robbed for 1100 bucks the day after the first pre order debacle. Knocked me into overdraft. Still trying to get everything squared away with the bank. Still sitting in negative at the moment so I wasn't even able to score the figures. Fun Pub told me to contact them, so I sent an email two days ago politely explaining the situation as it happened WITHOUT pointing fingers or saying they were to blame (because honestly there's no definite proof that it had anything to do with TFCC), but they still haven't contacted me back. The entire situation is pretty lame.

That's an odd charge. Usually when someone gets your CC number, they go nuts and buy expensive crap all at once. A $1 charge all by itself is not something you usually see when someone has stolen your CC info. Unless it was someone just testing to see if it worked in the first place.

Not really true.
In most cases I've seen or heard of, it usually starts with a small transaction to test the card, followed by a large transaction.
For example, my card was "tested" with a $10 transaction to Bed bath and Beyond, followed shortly by $833 to American airlines.

Weird. When my info was stolen years ago, I only had several large purchases on it - each of them over $100. I guess it depends on who's got your info. Regardless, having your CC # stolen is a ridiculous pain in the ass.

The only other time my CC was compromised was when TFsource had their shitstorm. The first charges I started noticing were $1 ITunes charges, which at the time I wasn't even using. Sure enough, 2 days after those charges came up I had a larger one for SPEED DATING.

Go figure ...

So I called it in this morning and canceled the card. I'll call my bank during lunch to explain the situation to them. I just warn everyone to be aware of their CC statement.

always starts witha 1 dollar charge..most of the time itunes.

My card was recently tested with a $0.01 Yahoo Wallet charge (before TFCC pre-orders started!). But that was enough to set off my CC company's alarm flag, though.

I am having the same issue with funpub. I tried emailing them when I got my invoice (on monday) and have yet to hear from them. I woul call them but long distance charges would be insane. They certainly don't seem very professional. I do understand that they maybe very well swamped from the over-run orders, but come on, how long does it take to answer a simple email.

Q: HTF can't these people be easily caught if they're buying plane tickets or having shit mailed to them? I get in some cases they have the shit delivered to a random address and then swoop in and snag the goods at the door, but it still wouldn't be that hard to catch them in the act. Maybe if a little more effort was put into busting these fuhksticks and throwing the book at them, there might be a little more of a deterrent to committing these crimes in the first place.

While the $1 "test charge" is completely true, gas stations also do that (at least the ones I frequent). Why? I don't know. But every time I get gas, I notice my "available balance" being only $1 shy, instead of the full amount I spent, until the transaction is finally logged.

EXAMPLE: I spend $30 on gas. Prior balance is $294. Instead of my available balance showing $264 (like it does with other transactions I make - like on Wednesday, my account was $117 less, even though it didn't show my transaction with FunPub yet), it only shows $293, then after a day or so, it finally drops to the $264 it should be, and shows the itemized deduction "SHELL MOBILE STATION DEBIT - $30" or whatever.

Gas stations do that because they don't know how much to charge until you are done filling up. The $1 charge is to make sure the card will work, then it will let you fill the tank. If you got the gas first, then the card doesn't work, they can't take the gas back like they would at a Wal-Mart checkout if your card didn't work. Of course, if you had a $2 available balance on your credit card then the gas station would be screwed.

I suppose a hacker might do that to verify a card works and possibly pass it along or use it later.

And thanks for the "why." Makes sense. Not sure why I didn't consider that.

So, going back and reading through the thread a few times to make sure, the suspicious charges are happening to the people who ordered on Monday, right?

Well, yea, you would be stealing from the gas station. I imagine that is frowned upon.


No, not just Monday. I joined the TFCC on Saturday and (coincidentally) my card info was stolen soon after.

Gotcha. Was concerned their new company was the shady one.

I just canceled that card! Im not gonna mess around!

I suggest calling your card companies up to put a 48 hour hold on the account to help detect theft.

Ordered on Monday. No funny business at all. I guess I am lucky?

that gas station is still getting paid somehow though... otherwise everyone would do that... i bet they get paid by the CC company still, and then the CC company goes after the person who pulled that...

Sorry I must have missed you, now let me hook you up with an itunes charge.
HAHA

I have a new entry in this saga.

I did NOT order Monday. Everything crashed before I even saw the figure was up. I ordered shortly after it went up again Wednesday afternoon.

Today I got an email from my bank saying to call them. I did and they are canceling my debit card. There are no bad charges, but one of the merchants I recently spent money with--they couldn't tell me which--informed them that their system was compromised and that my debit card # was vulnerable.

Soooo I don't have a debit card for 5-7 days.

I still don't know it was FunPub but there isn't really another super-plausible suspect on my transaction list, especially hearing that others of you have had problems.

A $1 charge happened to me when my Debit Card number got stolen early last year. There was a $1 charge to iTunes (as a test) and then they ATTEMPTED to go to town with about $1,300 worth of merchandise. Luckily, my cardholder detected the pattern and stopped the card.

This just happened to me too, the lady at the bank was not suppose to tell me who it was with, but she accidently let it slip that Lucky's was hacked and my info may have been comprised. So I got a new card this week as well. Not sure if related, but I know a lot of people shop at Lucky's. Seems like your not safe anywhere anymore

Did FP send out any type of notification?

Great..... :/

Unfortunately not everyone lives in the US (where cable/phone/internet are dirt cheap). I live in Canada and my service provider charges long distance & an exorbitent amount of money.

Thank you for giving me the toll free number. I did not see it anywhere. All I found was the 817 number.

I lucky have not had an issue with my cc, but with my order. I am watching the account just to make sure.

I wonder if it's getting worse all around. My credit card got hacked right before the Botcon registration up so nothing to do with FunPub but I missed out on the customization class because of it.

No, that's what happened. First a $1 charge went through. Then a $55 one for a room at a hotel in the UK. It flagged in their system, though I called them before they called me. They credited me the money right away while investigating, and everything was fine in the end.

Add me to the list of attempted fraud activity post Fun Pub purchase on my credit card. There was an attempt for $1.00 from a Yahoo Wallet account within 2 days of my Runabout purchase.

Just checked my bank account since I use a debit card, and so far, no strange charges. I'll be monitoring it over the next couple of days though. I'll order a new card on Monday and keep watch while waiting for it to show up. Since the expiration date is approaching anyway, I may just get a new one with the same number. The 3 digit verification number on the back as well as the expiration date both change. Even if someone got the number, they'd have a hard time figuring out the other two to be able to use it for anything.

I just had a thought. Could the "Google" charges people are seeing be for an Android Market purchase on their phone? Like maybe they bought something on there and forgot about it?

I think this is now the 3rd time in less than a year that my credit card data has been compromised. It's practically routine now which is sad.

My credit card was number was just stolen too, same card i used for the Club exclusives.

Did you get your set on Monday or Wednesday?

I tried ordering on Monday several times but got the "unknown error." Finally ordered it on Wednesday.

Ug. Sorry man. Guess that should put everyone on alert that their stuff may be compromised too. Check your card statements people.

Is it the same card you used the last time you re-upped your membership?

There were some people that didn't even order Over-Run, and they got hit with fradulent charges. I think that if you used your card at TFCC for any reason before they switched servers last Tuesday, then there is the risk of having your CC compromised.

I have a different CC now than I did when I re-upped last year, and I wasn't successful in ordering last Monday. I ordered Wednesday, after they switched, and haven't had any problems (yet).

Yup, and that may have more to do with it than Over-Run. I renewed just a couple weeks before.

I think you're right (see my edited post). If your card was on file at TFCC at all, (Over-Run or not), then you were likely compromised.

And now GogDog has joined the rank of victims. Sorry to hear it, bro.
I was hit on Tuesday for over a grand after the Monday preorder catastrophe (same card I used to join the club two months ago), and still feeling the residual financial sting.

TFCC has YET to reply to any of my emails, not that it really matters anymore at this point.

I cancelled my card before anything had a chance to happen. Looking at what everyone is saying now, I'm sure my number was compromised as it's the same card I joined the club with last year, ordered cheetor with, and ordered Runabout with on Monday.

TFSource did the same thing to me when their credit system got messed with. I signed up for the paypal debit card today and will be calling to cancel my current debit card tomorrow just to make sure nothing fishy happens with my account.

Just worrying about this is enough for me not to go back to funpub for anything again, which is pretty much what I did with TFSource.

To my knowledge, the TFCC does not keep card numbers 'on file'.

Yeah, they've forever lost me as a costumer.

Sucks, I was super excited about the exclusives. Couldn't get them at all because I was still deep in overdraft till after they sold out.

From this point, I don't care how amazing the exclusives are. I'm never giving funpub another penny of my money. Their clumsy business practices and complete LACK of costumer service through out this ordeal has left me with nothing but disdain.

Luckily my bank declined the charges because they were overseas. Still it my primary source of money suspended for a week though until I get the new bank card

There has to be some sort of storage, otherwise how else can the current situation be explained? Far past the point of just being coincidental.