Seibertron.com Energon Pub Forums

chuckdawg1999 wrote:

Seibertron wrote:

chuckdawg1999 wrote:

Delicon wrote:Usually at BotCon the cash line moves more quickly for the exclusives although there could be a serious change in that this year.

Keep in mind that at the conventions they swipe your card then and there at the POS. It's not like it's going through a web site.

It's still going through a payment processor, if there's a problem on the payment processor end (which is highly unlikely). If there ever is a problem on the payment processor end, especially with a large company like Authorize.net who the Club is now using according to their website and some tweets or somewhere else that I saw it, it'd affect a far larger portion of credit/debit card users than just Transformers fans ... and would affect users on hundreds/thousands of websites.

That's on the web site. The POS terminals run through a different system no?

Depends, I don't think they do ... but maybe someone who has more experience with credit card processing at events or in person can explain the process. I'm pretty sure all of the payments ultimately go through payment processors. Or maybe they go through your local bank's payment processors?

http://vsales.chasepaymentech.com

Seibertron wrote:

chuckdawg1999 wrote:

Seibertron wrote:

chuckdawg1999 wrote:

Delicon wrote:Usually at BotCon the cash line moves more quickly for the exclusives although there could be a serious change in that this year.

Keep in mind that at the conventions they swipe your card then and there at the POS. It's not like it's going through a web site.

It's still going through a payment processor, if there's a problem on the payment processor end (which is highly unlikely). If there ever is a problem on the payment processor end, especially with a large company like Authorize.net who the Club is now using according to their website and some tweets or somewhere else that I saw it, it'd affect a far larger portion of credit/debit card users than just Transformers fans ... and would affect users on hundreds/thousands of websites.

That's onto the web site. The POS terminals run through a different system no?

Depends, I don't think they do ... but maybe someone who has more experience with credit card processing at events or in person can explain the process. I'm pretty sure all of the payments ultimately go through payment processors. Or maybe they go through your local bank's payment processors?

http://vsales.chasepaymentech.com

In my store the credit card reader is linked to a bank who handles all the processing like Chase. They then send us the money after taking out fees and such.

Well, my **** got hit today. Both cards I unsuccessfully tried ordering with on the 30th were hit. Can't trust anywhere that starts with 'TF' I guess...

LOST Cybertronian wrote:Got hit today, luckily my bank recognized the fraud and put a stop on my card. Only got $350 from some pc game website.

They got me for a substantial amount but i acted fast enough to prevent any permanent damage. The culprit had a fancy for the Mac mall and decided it was time to upgrade his home computer. Later on he was feeling photogenic and decided a new Digital camera was in order. I spoke to both websites and had them recognize the charges as fraud and they stopped both orders immediately. Both were very helpful..

Seibertron wrote:Thanks to LiKwid's reminder, I canceled my 2nd debit card and my 2nd credit card. I canceled my primary ones last week, got new cards and numbers this week, so this will complete the process for me. I've escaped being hit with credit card fraud yet again! Hopefully my vigilance to cancel my cards as soon as I hear about problems or on an annual basis will continue to pay off. Fingers crossed!

I'm sorry, but I refuse to cancel my cards just because some third rate company can't get their sh*t in order... This just might be the final nail in the coffin that ends my Transformer collecting.. I've made plenty of online purchases at other stores and haven't had any problems...

SoundStang wrote:I'm sorry, but I refuse to cancel my cards just because some third rate company can't get their sh*t in order... This just might be the final nail in the coffin that ends my Transformer collecting.. I've made plenty of online purchases at other stores and haven't had any problems...

What? Are you saying that if you were affected you wouldn't cancel your cards? Obviously you didn't get the chance to order anything so you shouldn't have been affected. But let's say in a hypothetical situation you were hit with fraud, that card would NEVER stop being hit with fraudulent activity, your card number would be placed in the hands of dozens of individuals who will continue to pass it on and on and on. It may not happen frequently but so long as the card is active it will most certainly happen again.

One phone call and a week or less of waiting. It's not that hard.

On the other hand, I understand where you're coming from. I felt like stopping my collecting as soon as my Bank called. But a few days later, I realized I just couldn't, since I wouldn't just be giving up TF collecting I'd be giving up collecting anything. Most of the sites I use cover multiple bases, not just Transformers but things like Legos, Megaman, Metal Gear and Gundam. I suppose it's because I'm still young and single, not having much to fill the void in my life, or maybe it's just because I don't want to grow up, I don't know, But it's become a part of me I have difficulties letting go. Yeah, it's kinda childish. <_<

But hey, everyone's different.

What I'm saying is I shouldn't have to cancel my cards on a routine basis just because of this issue... I've had the same cards for years, AND I regularly shop online at various other retail outlets... Perhaps I've just been fortunate... I haven't made a purchase from FunPub since last February when I renewed my club membership... It's due to expire in March... I don't see myself renewing it this year...

chuckdawg1999 wrote:

Seibertron wrote:

chuckdawg1999 wrote:

Seibertron wrote:

chuckdawg1999 wrote:

Delicon wrote:Usually at BotCon the cash line moves more quickly for the exclusives although there could be a serious change in that this year.

Keep in mind that at the conventions they swipe your card then and there at the POS. It's not like it's going through a web site.

It's still going through a payment processor, if there's a problem on the payment processor end (which is highly unlikely). If there ever is a problem on the payment processor end, especially with a large company like Authorize.net who the Club is now using according to their website and some tweets or somewhere else that I saw it, it'd affect a far larger portion of credit/debit card users than just Transformers fans ... and would affect users on hundreds/thousands of websites.

That's onto the web site. The POS terminals run through a different system no?

Depends, I don't think they do ... but maybe someone who has more experience with credit card processing at events or in person can explain the process. I'm pretty sure all of the payments ultimately go through payment processors. Or maybe they go through your local bank's payment processors?

http://vsales.chasepaymentech.com

In my store the credit card reader is linked to a bank who handles all the processing like Chase. They then send us the money after taking out fees and such.

Yes, now that I think about it, they probably would be unrelated. I used to handle credit cards at my deli through a reader/POS system. Still, I think it may be a psychological thing with people. Btw, have I missed the e-mail or post where the Club actually confesses that all these funky charges may have SOMETHING to do with purchases from their site? I just saw a FB post where they said the store was down but the rest of the site was up and you could still renew your membership.
Kinda brazen, if you ask me.

SoundStang wrote:What I'm saying is I shouldn't have to cancel my cards on a routine basis just because of this issue... I've had the same cards for years, AND I regularly shop online at various other retail outlets... Perhaps I've just been fortunate... I haven't made a purchase from FunPub since last February when I renewed my club membership... It's due to expire in March... I don't see myself renewing it this year...

Yeah I get it. Thankfully this isn't anything that's become routine for me. But if and when it happens it should be a huge breach of trust for anyone. If people had good common sense they would have given the middle finger to TFSource the first time it happened to them. It's the small business market, there's competition, you don't have to shop from them anymore if they screw up. But people don't have their priorities straight I suppose.

In the club's case, well you can't purchase the figures for a retail price elsewhere, they are exclusives after all. But if you're smart and have proper convictions, you will never purchase from them again. It's what they deserve for compromising information that delicate.

I unfortunately suffered credit card fraud on Feb. 14. after making the purchase. Several large purchases were made; thankfully this was rectified by my Credit card company.

Yes, now that I think about it, they probably would be unrelated. I used to handle credit cards at my deli through a reader/POS system. Still, I think it may be a psychological thing with people. Btw, have I missed the e-mail or post where the Club actually confesses that all these funky charges may have SOMETHING to do with purchases from their site? I just saw a FB post where they said the store was down but the rest of the site was up and you could still renew your membership.
Kinda brazen, if you ask

I saw that as well.. A part of me just wants to move on from this whole ordeal but another part of me thinks that this was a inside job..Which is stupid but it just seems to me like someone was looking the other way..

LiKwid wrote:

Yes, now that I think about it, they probably would be unrelated. I used to handle credit cards at my deli through a reader/POS system. Still, I think it may be a psychological thing with people. Btw, have I missed the e-mail or post where the Club actually confesses that all these funky charges may have SOMETHING to do with purchases from their site? I just saw a FB post where they said the store was down but the rest of the site was up and you could still renew your membership.
Kinda brazen, if you ask

I saw that as well.. A part of me just wants to move on from this whole ordeal but another part of me thinks that this was a inside job..Which is stupid but it just seems to me like someone was looking the other way..

I have a hard time believing it was an inside job, but that is just me.

Earlier in this thread I posted several (well, maybe just two?) comments from TFCC that appeared on their FB page where they discuss this. They certainly don't admit responsibility (which may be a smart legal move) but they do admit something is going on and admit that they believe their system was compromised.

As an FYI, I finally got hit with fraudulent charges this morning. I had two 1.99$ charges and one for 80$. It was easily dealt with and only "cost" me the use of one of my credit cards for 10 days, but still sucks.

F Prime wrote:

LiKwid wrote:

Yes, now that I think about it, they probably would be unrelated. I used to handle credit cards at my deli through a reader/POS system. Still, I think it may be a psychological thing with people. Btw, have I missed the e-mail or post where the Club actually confesses that all these funky charges may have SOMETHING to do with purchases from their site? I just saw a FB post where they said the store was down but the rest of the site was up and you could still renew your membership.
Kinda brazen, if you ask

I saw that as well.. A part of me just wants to move on from this whole ordeal but another part of me thinks that this was a inside job..Which is stupid but it just seems to me like someone was looking the other way..

I have a hard time believing it was an inside job, but that is just me.

Earlier in this thread I posted several (well, maybe just two?) comments from TFCC that appeared on their FB page where they discuss this. They certainly don't admit responsibility (which may be a smart legal move) but they do admit something is going on and admit that they believe their system was compromised.

As an FYI, I finally got hit with fraudulent charges this morning. I had two 1.99$ charges and one for 80$. It was easily dealt with and only "cost" me the use of one of my credit cards for 10 days, but still sucks.

Do me a favor and tell me exactly what you mean, because I think the best they've done is say how internet security is very important and how we should always protect ourselves. I've yet to see anything that even remotely looks like them admitting their own site was compromised, which is abysmal.

Delicon wrote:Do me a favor and tell me exactly what you mean, because I think the best they've done is say how internet security is very important and how we should always protect ourselves. I've yet to see anything that even remotely looks like them admitting their own site was compromised, which is abysmal.

Sure. Here is what I wrote on this a few pages back in this forum, including quotes from their FB page. As I mentioned earlier (and is quoted below) they are being obtuse. They are dancing around a direct admission of site-compromise, but it seems to me that they are admitting something happened.

F Prime wrote: They know something is wrong but they are being obtuse about it saying "While we have nothing to suggest that there was or is an issue with the TCC, we look into every concern that is sent to us"....which is not very helpful.

They are a little more open about it on their Facebook page (trusting that the Transformers Collector's Club (Official) is actually them). Essentially, they say they are confused about what is happening, that they are trying to figure out how to proceed, and that they welcome comments.

The most they said about the delayed contacting of members was this on February 10: " Brian Savage has been out of office for the past two days dealing with the estate of his late parents, both of whom passed away in 2011. Brian is the person who sends the mass emails from the Club. We are addressing this today now that he is back in the office. This situation has only existed for a few days and we have been trying to address it without making too many missteps due to a lack of information. This is a difficult time and we appreciate your patience. We highly value our members and hope that over the years we have built up enough trust, that when there is a potential problem, you will stand with us while we weather the storm."

And as for "taking the blame" they had this to say: "Yes, at the heart of this, someone out there is stealing from good people and casting aspersions on the Club. The members are not to blame and the Club is not to blame. There is a culprit SOMEWHERE who is making all our lives difficult. We REALLY appreciate your help as we try to help this situation come to a conclusion as soon as possible. The reason we are asking for fraud details is to look for anything common that might indicate or dismiss a possible problem. So far, we have found nothing that shows where any card information could have been compromised, but we are still investigating. This is a process and we take this situation VERY seriously. Together, we can beat this. Thank you."

*Again, this is assuming that this FB page is really from the TFCC......

F Prime wrote:So far, we have found nothing that shows where any card information could have been compromised, but we are still investigating. This is a process and we take this situation VERY seriously. Together, we can beat this. Thank you."

It seems to me that this just contradicted anything that was said above that. Shady at best. Just come out and say "We don't know how this started and don't think it was anything any of our staff did, but this problem is real"

In other words, grow a set and take care of the customers the way you should.

Delicon wrote:

F Prime wrote:So far, we have found nothing that shows where any card information could have been compromised, but we are still investigating. This is a process and we take this situation VERY seriously. Together, we can beat this. Thank you."

It seems to me that this just contradicted anything that was said above that. Shady at best. Just come out and say "We don't know how this started and don't think it was anything any of our staff did, but this problem is real"

In other words, grow a set and take care of the customers the way you should.

I am certainly reading this with my own spin, but I read "The members are not to blame and the Club is not to blame. There is a culprit SOMEWHERE who is making all our lives difficult" as pretty similar to what you said.

Regardless, we are mostly parsing phrases and discussing semantics now. I am just glad my card company caught the fraudulent charges and I hope others in this situation get out of this relatively unscathed.

On a slightly different note, one of my fraudulent charges was marked as "AT&T". The bill was for the same amount as my usual monthly charges for my iPad cell service and I thought it was legitimate. I wouldn't have noticed anything unusual, but the fraud department at my card pointed out that I had paid the same amount one week earlier and I called AT&T and it was not them. I don't know much about this.....would it be difficult to fake something like that? Or am I overestimating the difficulty? I have had fraudulent charges before and they are usually very easy to spot....$500 spent at an unheard of company somewhere in another country. This was the first time I had a charge that I would not have noticed even looking over my statement.

Check your email, Brian just sent out an email saying they were at fault.

joevill wrote:Check your email, Brian just sent out an email saying they were at fault.

Copy and paste?

Admitting could leave them open to all sorts of other problems ...

This is going out to all members:



Fun Publications wants to take this opportunity to apologize to all of our members.



After many days of analysis, Fun Publications has determined that there is a security issue with our e-commerce systems. We appreciate all of you who have sent in your details. Your help has allowed us to ferret out several different patterns of fraudulent charges that have appeared on some members' cards (any that have been used over the last year with both the club store and our event registration system).



We have several different internet/networking companies looking into the matter. Unfortunately, as of yet, we have not been able to identify any forcible entry either into our internet service provider's servers or network. This is like chasing a ghost through the wires, as unfortunately, the perpetrator did not leave a trail, foot prints or finger prints.



For those of you who have been affected, we apologize for all of your time this has wasted and any inconvenience it has caused you. We understand your frustration as this same type of fraud has happened to everyone in our office on our personal credit cards at some point in the past. Our merchant services provider wants us to remind everyone that even though this can be a huge annoyance for you, the customer, your issuing bank will not hold you responsible for any fraudulent charges that might be placed on your card(s).



We know that this issue has been a huge topic of discussion on all of the boards for the past few weeks. However, we are required to investigate to determine and confirm a security issue thoroughly before making any public statements. This is why we put out a general alert statement two weeks ago.



Until the analysis is finished (can take several weeks) we don't know if the shut down by our former (Jan 31st) e-commerce provider caused the security issue or not. We do know that it has not been limited to those who have purchased before the change to our new provider.



Please, watch your cards closely as this type of security issue appears to be on the increase across the net. No site is 100% safe. You may want to consider having any cards you have used with Fun Publications in the last year replaced.



At this time, we do not know how long our e-commerce site will be offline for both the store and registrations. We will get back to you once we have a solution for this security issue.



Thanks for your support - Brian

Earlier this month, Seibertron.com was the first Transformers fansite to warn it's members to be on the look out for suspicious credit card activity after several Energon Pub and Staff members were hit with fraudulent charges shortly after placing orders for TFCC 2012 exclusives Over-Run and Shattered Glass Drift. After weeks of analysis Fun Publications, the parent company of TFCC, has determined there is a security issue with their e-commerce system. They have issued the following apology and statement/e-mail to all members:

This is going out to all members:

Fun Publications wants to take this opportunity to apologize to all of our members.

After many days of analysis, Fun Publications has determined that there is a security issue with our e-commerce systems. We appreciate all of you who have sent in your details. Your help has allowed us to ferret out several different patterns of fraudulent charges that have appeared on some members' cards (any that have been used over the last year with both the club store and our event registration system).

We have several different internet/networking companies looking into the matter. Unfortunately, as of yet, we have not been able to identify any forcible entry either into our internet service provider's servers or network. This is like chasing a ghost through the wires, as unfortunately, the perpetrator did not leave a trail, foot prints or finger prints.

For those of you who have been affected, we apologize for all of your time this has wasted and any inconvenience it has caused you. We understand your frustration as this same type of fraud has happened to everyone in our office on our personal credit cards at some point in the past. Our merchant services provider wants us to remind everyone that even though this can be a huge annoyance for you, the customer, your issuing bank will not hold you responsible for any fraudulent charges that might be placed on your card(s).

We know that this issue has been a huge topic of discussion on all of the boards for the past few weeks. However, we are required to investigate to determine and confirm a security issue thoroughly before making any public statements. This is why we put out a general alert statement two weeks ago.

Until the analysis is finished (can take several weeks) we don't know if the shut down by our former (Jan 31st) e-commerce provider caused the security issue or not. We do know that it has not been limited to those who have purchased before the change to our new provider.

Please, watch your cards closely as this type of security issue appears to be on the increase across the net. No site is 100% safe. You may want to consider having any cards you have used with Fun Publications in the last year replaced.

At this time, we do not know how long our e-commerce site will be offline for both the store and registrations. We will get back to you once we have a solution for this security issue.

Thanks for your support - Brian

oops

"Sorry about your luck to those who got screwed, but after weeks of super-sleuthing, we at FunPubs still have no clue about any of this mess. It might not even have anything to do with us. Our solution is to shut down completely. See you at BotCon!"

Thank you for the response. It's precisely what I was hoping, and expecting to see on all this.

NebulanFree wrote:"Sorry about your luck to those who got screwed, but after weeks of super-sleuthing, we at FunPubs still have no clue about any of this mess.

Welcome to the world of cybercrime. More often than not the perp gets away.

Thaaaat pretty much CEMENTS Swindle into the Hall of Fame this year.

It's cool to send out a statement so folks know what to expect.