Hey, thanks for clarifying, and I see better where you're coming from now man. Thinking it was about me, I was like, "Really? A movie even? C'mon now.". So, thanks. I appreciate that man, and def. no hard feelings towards you or anything like that.

LoL. If only megaphones on cars were legal...

That. Is. HILARIOUS.  

 

Ah, I missed that. I was just having an interwebs hissy fit.

I just needed to rant a little. You are however correct. It's not the best way to get a response, far from it.

 

How is it that some of you have NOT canceled your cards? We've known about problems since the beginning of February. It took me all of 10 minutes on the phone to cancel my cards. If you used the card on the site, it's not a matter of if, it's when.

Wonder how many more of the "I just got hit. Fuck you FP" posts we'll see.

 

I hope we eventually get to know how this happened. Was it their CC processor or just the TFCC sites. From the looks of things, it's their site and changing CC processors did nothing. I'd also like to know what information exactly was stolen. It's annoying with a CC number gets stolen. It's frightening when your addresses get stolen along with the CC.

Ugh.

 

So far, that's been my experience, as well. That said, I was under the impression that some folks here had said that their own cards that had been used on the BotCon.com site, but not on the club store (they use different front-ends, which could be significant here) had been hit.

So, for the sake of accuracy (if redundant), can anyone say if they've been hit by fraud on a card only used at BotCon.com, but not via the regular club store?

 

Well, that movie F'n rocks! So no, don't feel alone. One of the best older John Cusack films. With Gross Point Blank being one of the best newer ones.

 

Boardwise used a new card to register for Botcon this year. He made no TCC club store purchases with it.

The Joe side also uses different front ends and they have had rampant card fraud as well.

 

Not really on the boards anymore, and no longer a member of the club, so I had no idea this was going down until earlier this week, but add me to the mix. My card got nailed earlier this month... a $1 charge followed by a $1500 Dell computer. I just figured it had been stolen by a server at a restaurant.

Both Dell and the cc company were on it, and everything was cleared up within a matter of hours. Still, it's a bummer; I had that same card for more than a decade, and I knew those numbers better than my phone number.

Frankly I'm not terribly surprised--I was a club member for the first six years, and from the beginning FP was incredibly reluctant to invest in robust technology solutions. No surprises that security would also be basement-bargain priced.  

 

I finally got hit. It was a card that had not been used since last year for renewing my TFCC membership!

For safety, I just had my bank cancel and replace my checking debit card since that was what I used to buy Over-Run. I normally only use my PayPal MasterCard, but when the club's credit card issue was going on, I didn't want to miss out on Over-Run and used my checking card after my MasterCard was declined.

 

Seeker311, I have NOT, and the last pending payment cleared, so I'm calling my CC company the minute I get home.

 

OK, so I'm not very internet savvy, but I'm guessing what happened is that someone 'injected' a script into the FunPub page where you fill in your personal payment details; i.e. credit card details AND personal information. This script made people think they're getting directly through to FunPub, but in actual fact, information is scraped and sent to the hacker while also being passed on to the actual site.

For more information, read this article about a web-based keylogger, which dates from 2009 but still seems pretty workable for an antiquated website design like FunPubs. It would in fact also explain the CC crash: the hacker's 'faux' inlog site couldn't handle the mass of information being passed through it, and created a whole mess of errors on FunPub's side and the CC-provider's side. It must have been like a jackpot for the hacker: a seemingly unstoppable mass of CC- and personal info was just pouring in! It would also explain that changing the CC-provider didn't mean the hacks stopped there too!

What this would mean, if it were true (this is only a theory which I can't prove, BTW)? Well, if it were true, which I'm not saying it is, it would mean that FunPub is culpable, due to having an outdated website with poor security. It would also mean the original CC-provider might actually NOT be to blame for the system crashing. Not sure if people who made an order on a Mac computer or a tablet or a mobile phone were less likely to be hit than those who logged in on a PC, but if so, that might provide more proof, considering the better security / different protocols on those systems.

Anyhow, like I said, I can only guess, and I'm pretty sure some of you guys have better theories on how this happened...

 

The problem is for those who use the same password for all their accounts and websites. Good reason not to use the same password.

 

This seems pretty logical to me. And I have a Mac and was still affected by this. My order didn't go through the first couple of tries, if I remember right. I believe it went through on the 3rd or 4th try. Makes complete sense why the site was giving off all those errors.

 

Same here. Don't wait, everyone needs to cancel every and all cards associated with their TFCC accounts, as bullshit as a hassle as that maybe its better than having your credit card company miss out on a possible fraudulent charge and really fuck up your finances.

 

This is a really, really interesting theory.

 

Admittedly, I didn't read the article, but this would seem a more likely scenario if only those being hit were during the cluster fuck on the 30th. Since this seems to span back years, it would seem more likely something else. Maybe they should ask TFcurse what their breech was...sounds like a similar deal. Of course we never heard any more on that so we don't even know if they ever found out anything or did anything to prevent it going forward. At least the Club is being more upfront about it...

 

People are saying that the $2 increase for club membership is to offset the increase of postage. Postage increase for first class mail is 1¢. I know since third class mail is bulk rate, FP doesn't pay the same rate as the rest of us. And don't throw in club exclusives in the mix since we have to pay for that.

 

I thought I was ok, then I just found out today about $900 charged to Wal-Mart.com on my bank account, which was the card I used at the store to get Over-Run.

So this mess is far from over.

 

my new card which has ONLY BEEN USED FOR A FUNPUB PURCHASES was hit today for 1dollar in google+ and then 4 thousand dollars luckily my cc company caught them both and contacted me today with the news and a free replacement on the way.

what they indicated to me was that although the cc processor may be compromised it seems more than likely that the computer system/network at the retailer (funpub) is was compromised. so it could be that regardless of whether or not theyve changed cc handlers their systems may be the issue.either way my attorney has sent them a formal letter demanding a refund of my expenses for botcon both for me and the misses as i will NEVER attend another event ever again nor will i order or visit their site.

they seem to be more concerned with money than integrity at this point. when youre business is compromised as well as the info of your customers the last thing you do is tell them to mail in checks/money orders for membership when you STILL HAVENT IDENTIFIED THE GODDAMN PROBLEM. thats just completely stupid.
as far as online fansites as this isnt the only one i think they should seriously consider parting ways with this sponsor just my opinion though.