Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords!

Wednesday, February 29th, 2012 6:04PM CST

Categories: Toy News, Collector's Club News
Posted by: Seibertron Views: 29,003

Topic Options: View Discussion · Sign in or Join to reply

Here is another update from the Transformers Collectors' Club run by Fun Publications. Please read this information if you have been a member of the Club in the past few years or if you have ever used a credit card with their organization.

Transformers Collectors' Club wrote:As we continue to work on our systems, you will see some of our services go offline and then come back, so please be patient as we preserve data and clone servers and websites.

We are also taking this opportunity to remove all non-essential services from our ecomerce server. So in the short term in the next day or so, the club forums will be discontinued. It will be several days until we are ready to bring them back under an entierly new piece of software. I know alot of you have been asking for this so, we have decided to replace several of our systems with new packages. This means that you will not have access to the forum for a while at all. We do plan to make the old forum viewable (no posts) in the future.

Since we do not know exactly what data was taken, we are recommending that if your have used common logins or passwords with our system and any other system that your change your passwords in those systems immidiately (especially any financial sysstems)! We will be resetting all of the passwords in our system very soon. Please don't delay in changing your passwords in other locations.

In addition, we have found a few recent aticles concerning security issues with other vendors. If you use these services, these issues could possibly impact you. Please read the attached links:

http://www.huffingtonpost.com/2012/02/1 ... 68593.html?

http://www.greenpois0n.co/itunes-accoun ... redit.html

Thanks for your support in this difficult time. We will continue to work with our vendors to correct the issues and we apologize for any inconvenience this has caused any of our members.

Brian Savage

If you have not cancelled your credit or debit cards that you have used in the past, you MUST cancel those numbers. It's a very simple process. You just need to call the phone number on the back of your card, explain what happened, and your bank or credit card company will send you a new card which you should received in 7 to 10 business days or sooner (I received one of mine in 4 business days). You MUST do this. It is inevitable that failure to do this will only result in your card being used for fraudulent purposes. Do NOT wait for you to get hit. The only way you can protect yourself is by cancelling your current card numbers and having new cards sent to you.

It is also strongly recommended that you immediately change your passwords if you use your password on TransformersClub.com on any other website or banking website. The passwords in their database are not encrypted and it should be assumed at this point that all of our account information was taken along with our payment information.

Credit(s): Fun Publications

News Search

Got Transformers News? Let us know here!

Most Recent Transformers News

Transformers 40th Anniversary Event Giveaway

Posted 1 day ago

Transformers One Toyline will have Open Window Packaging - Plastic Windows Coming Back Only in 2025

Posted 2 days ago

Click here to post your comment about this news story!

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353547)
Posted by Mighty_Galvatron on February 29th, 2012 @ 6:12pm CST

What?!

What kind of incompetents are running that place?! This is pure stupidity - unacceptable.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353548)
Posted by DISCHARGE on February 29th, 2012 @ 6:13pm CST

That's a pleasant surprise for everyone. HUZZAH!!

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353552)
Posted by AutobotCliffjumper on February 29th, 2012 @ 6:21pm CST

FINALLY, NEW FORUM! Interestingly enough it took a HUGE fudge up to finally get the ball rolling on the right direction. Still not happy about the security/fraudulent charges on my account.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353562)
Posted by Trikeboy on February 29th, 2012 @ 6:48pm CST

Instead of continuing to proceed their career in credit reports, has the club actually said sorry and accepted full responsibility yet?

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353565)
Posted by Seibertron on February 29th, 2012 @ 6:55pm CST

Trikeboy wrote:Instead of continuing to proceed their career in credit reports, has the club actually said sorry and accepted full responsibility yet?

They're apologized, not sure about accepting full responsibility. They might not be able to legally, I'm assuming that's the advice a lawyer would give them (which I hope they have consulted because this is all extremely serious and delicate stuff). Their latest apology is in the email that was quoted in the latest news story about this.

Transformers Collectors' Club wrote:As we continue to work on our systems, you will see some of our services go offline and then come back, so please be patient as we preserve data and clone servers and websites.

We are also taking this opportunity to remove all non-essential services from our ecomerce server. So in the short term in the next day or so, the club forums will be discontinued. It will be several days until we are ready to bring them back under an entierly new piece of software. I know alot of you have been asking for this so, we have decided to replace several of our systems with new packages. This means that you will not have access to the forum for a while at all. We do plan to make the old forum viewable (no posts) in the future.

Since we do not know exactly what data was taken, we are recommending that if your have used common logins or passwords with our system and any other system that your change your passwords in those systems immidiately (especially any financial sysstems)! We will be resetting all of the passwords in our system very soon. Please don't delay in changing your passwords in other locations.

In addition, we have found a few recent aticles concerning security issues with other vendors. If you use these services, these issues could possibly impact you. Please read the attached links:

http://www.huffingtonpost.com/2012/02/1 ... 68593.html?

http://www.greenpois0n.co/itunes-accoun ... redit.html

Thanks for your support in this difficult time. We will continue to work with our vendors to correct the issues and we apologize for any inconvenience this has caused any of our members.

Brian Savage

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353576)
Posted by Autobot032 on February 29th, 2012 @ 7:33pm CST

Again?? REALLY??

-_- *sighs*

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353581)
Posted by mattwhite924 on February 29th, 2012 @ 7:39pm CST

They didn't encrypt the passwords!? Who the heck is running that site, a 4 year-old?

There is absolutely NO excuse for not encrypting passwords.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353611)
Posted by DevastaTTor on February 29th, 2012 @ 8:46pm CST

Jeez, what's next?!? I guess tomorrow they'll be telling us all to change our names and enter the witness relocation program!

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353629)
Posted by Naked Magnus on February 29th, 2012 @ 9:32pm CST

mattwhite924 wrote:They didn't encrypt the passwords!? Who the heck is running that site, a 4 year-old?

There is absolutely NO excuse for not encrypting passwords.

That is correct. I am a professional software developer and have a masters degree in computer science. The entire site is built like sites were literally 10 years ago. Either they do not want to invest the money to modernize or their own in-house developers are seriously behind the times. Their software is a complete hackjob by todays standards. Nobody uses Cold Fusion anymore. I used to, but that was in 2002.

I haven't done shopping cart sites in a long time, but I can't help but think there are off-the-shelf products out there that could easily be customized in a short period of time to replace this legacy piece of garbage.

It isn't hard to encrypt passwords. Either they are too lazy or their developers are compete idiots. It is completely trivial now'adays to encrypt passwords. Probably writing a migration script to encrypt the existing passwords is beyond their technical capabilities.

Seriously, we need to stop putting up with this crap. Another option for them is to outsource the online store to an entity that knows what it is doing.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353642)
Posted by funeralthirst7 on February 29th, 2012 @ 9:58pm CST

Using pictures of Swindle to accompany the article is great touch.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353655)
Posted by Stormrider on February 29th, 2012 @ 10:26pm CST

What has me must concerned is our personal information being taken. Name, address, etc. That's how my identity got stolen.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353667)
Posted by shin_hibiki on February 29th, 2012 @ 11:17pm CST

Highlighting the failures of other websites is a distraction and doesn't take away from your own flop. I'm sure anybody who got hit at iTunes is aware of it already.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353691)
Posted by bvzxa on March 1st, 2012 @ 12:46am CST

Naked Magnus wrote:
mattwhite924 wrote:They didn't encrypt the passwords!? Who the heck is running that site, a 4 year-old?

There is absolutely NO excuse for not encrypting passwords.

That is correct. I am a professional software developer and have a masters degree in computer science. The entire site is built like sites were literally 10 years ago. Either they do not want to invest the money to modernize or their own in-house developers are seriously behind the times. Their software is a complete hackjob by todays standards. Nobody uses Cold Fusion anymore. I used to, but that was in 2002.

I haven't done shopping cart sites in a long time, but I can't help but think there are off-the-shelf products out there that could easily be customized in a short period of time to replace this legacy piece of garbage.

It isn't hard to encrypt passwords. Either they are too lazy or their developers are compete idiots. It is completely trivial now'adays to encrypt passwords. Probably writing a migration script to encrypt the existing passwords is beyond their technical capabilities.

Seriously, we need to stop putting up with this crap. Another option for them is to outsource the online store to an entity that knows what it is doing.

I have a degree in Network Security and management and I see so much is wrong with how the website was setup. I know that letting an outside company handle commerce can get expensive if you aren't making alot of sales to support the cost.

What I see is just a lack of security and thinking. They thought no one would hack them, which of course is foolish thinking. For some reason the way the ordering page was setup, it felt like I was ordering from a company back in the late 90's.

As far as them accepting full responsibility, they can't. technically because the breach is well known, and has caused problems for people they are on the hook. However FunPub is no Sony, this hack job could ruin them and probably for good. I just better get what I paid for before that happens.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353696)
Posted by G1 Legacy on March 1st, 2012 @ 1:19am CST

It's times like this when I wish we really did have Optimus Prime around to help us out occasionally. How awsome would it be to have 'ol Optimus pull up in Brian Savages driveway at midnight....clear his airbrakes line (pchooooooooooooo) blow his airhorn pissing off the neighborhood dogs (both inside and outdoors) for miles and setting off a car alarm or two as well, then Transforming and walking to the door just as Savage stumbles to it himself to see what all the comotion is about....just in time to see Prime leaning down on bended knee and simply proceeding to chastize him like a 7 year old child..."Do we have a problem with responsibilty Mr. Savage?"

Oh, how cool would that be? ;)^

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353707)
Posted by Banjo-Tron on March 1st, 2012 @ 2:17am CST

Wow, I knew the website looked old-fashioned but I really thought that at least the backend would be secure. :BANG_HEAD:

Pre-dotcom bubble sites were more modern and secure than this one. This is the ultimate betrayal of trust, pure and simple. :-x

I will only forgive FunPub if they send me a free Punch/Counterpunch, with FREE shipping. (I'm only semi-joking about that)

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353708)
Posted by Autobot032 on March 1st, 2012 @ 2:43am CST

If you don't know business, don't run one. It's as simple as that.

I'm not trying to be mean, I'm really not, but I mean this is their umpteenth problem and it's costing people a LOT of money.

The CC companies must be losing dough with all the canceled charges, cards, etc. TFCC is lucky the companies don't file against them. They probably could.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353720)
Posted by jbliss on March 1st, 2012 @ 5:14am CST

Naked Magnus wrote:Nobody uses Cold Fusion anymore.

Just 778,000 of us and growing. http://wwwimages.adobe.com/www.adobe.co ... st-kit.pdf

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1353933)
Posted by Andrius on March 1st, 2012 @ 2:07pm CST

Just got fraudulent charges today. Closed my CC account. Keep checking, guys.

On a related note, I'm still waiting for my exclusives to ship... Insult to injury and all that.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354000)
Posted by mattwhite924 on March 1st, 2012 @ 3:44pm CST

I got a new debt card number today. Time to go change my accounts to use it before they try to charge anything to the old number.

At this point I wish I wouldn't have joined the Transformers Club, no toy is worth this kind of crap.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354032)
Posted by Kibble on March 1st, 2012 @ 4:43pm CST

Andrius wrote:Just got fraudulent charges today. Closed my CC account. Keep checking, guys.

On a related note, I'm still waiting for my exclusives to ship... Insult to injury and all that.

Don't keep checking...cancel your cards NOW!

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354050)
Posted by Autobot032 on March 1st, 2012 @ 5:26pm CST

mattwhite924 wrote:At this point I wish I wouldn't have joined the Transformers Club, no toy is worth this kind of crap.

This statement says it all. You should never have to say this over a toy. Never. Ya know?

I'm so saddened and dismayed by this whole thing.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354125)
Posted by bvzxa on March 1st, 2012 @ 9:02pm CST

UPDATE:

As I was checking my bank account I got a $298.54 charge from Walmart.com

I was in the process of cancelling my card when I saw this. Talked to the bank rep and she told me there was a $1 authorization charge to my card account to test the card. They did that on the 2/29. Then either last night or early this morning the attempt to use the card was made at Walmart.com

Now my bank kinda sucks but they did proceed the normal way of disputing the charge and proceeded to cancel the card.

Then I decided to give Walmart.com a call, and believe it or not, I got top quality customer service over the phone than I ever did at the many Walmart stores I shopped in. I began to explain to "Kevin" that I believe my card was used without my consent for a purchase. Since I have a Walmart.com account I checked that and the last .com purchase I made was a TV back in 2010. "Kevin" asked me for the last 4 digits of the card and what the amount was. I gave him the information and he found the charge. It went through but he said Walmart canceled the charge because the address did not match and there was an account already in my name. So he said even though it was on my bank statement the charge would drop off in 3 to 5 business days. He also took it a step further and escalate the situation to the financial security department.

he couldn't tell me the entire address but the thieves were trying to purchase an iPod Touch and trying to send it to California.

So I have no card but I have some peace of mind that this charge won't stick as well as not having to fight it out with the bank.

MODS: I'm gonna post this in the threads related to the TFCC fiasco so people can have some hope if they visit one of the three threads.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354194)
Posted by Banjo-Tron on March 2nd, 2012 @ 2:47am CST

bvzxa wrote:he couldn't tell me the entire address but the thieves were trying to purchase an iPod Touch and trying to send it to California.

See, this is what gets my goat the most. I have had 3 separate cases of fraud on my bank over the last few years. On each occasion it has caused me lots of stress, and in one case a stiff rebuke and cancellation of my account by PayPal (for some completely ludicrous reason)

I have asked my bank to chase it up and the merchant has supplied me with a printout of the transaction, but with the name and address of the criminal blacked out. Why the hell do criminals get the right to anonmyity? I just don't get it. :-x

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354204)
Posted by Burn on March 2nd, 2012 @ 4:35am CST

Because as far as the merchant is concerned, they're customers not criminals, giving out data like that will be a breach of their privacy.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354223)
Posted by Banjo-Tron on March 2nd, 2012 @ 6:52am CST

Burn wrote:Because as far as the merchant is concerned, they're customers not criminals, giving out data like that will be a breach of their privacy.

Oh OK. I assumed that the bank was the one that obscured their details, not the merchant. Does that mean that their identities are protected if, say, the police wanted to see 'em?

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354229)
Posted by Autobot032 on March 2nd, 2012 @ 7:30am CST

Banjo-Tron wrote:
Burn wrote:Because as far as the merchant is concerned, they're customers not criminals, giving out data like that will be a breach of their privacy.

Oh OK. I assumed that the bank was the one that obscured their details, not the merchant. Does that mean that their identities are protected if, say, the police wanted to see 'em?

No. With a warrant or a subpoena, PayPal has to release that information so an arrest may be made.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354307)
Posted by Sid Burn on March 2nd, 2012 @ 1:44pm CST

just a heads up to anyone interested.

TFCC is giving out refunds on their memberships based on the remaining time on your membership.

so if anyone wants to take action against this loss of personal data, please email TFCC and get your money back, they will also wipe all your data once you cancel your membership.

Damaging Brian Savage's bottom line is the only thing the TFCC will really feel, Botcon and the TFCC have made him a rich man, and there is no excuse for the broken, outdated site he was running when you are intaking the kind of money he does from the TF collector's community.

He had a responsibility and ignored it, I urge you all to pull your memberships.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354345)
Posted by Burn on March 2nd, 2012 @ 3:26pm CST

Autobot032 wrote:
Banjo-Tron wrote:
Burn wrote:Because as far as the merchant is concerned, they're customers not criminals, giving out data like that will be a breach of their privacy.

Oh OK. I assumed that the bank was the one that obscured their details, not the merchant. Does that mean that their identities are protected if, say, the police wanted to see 'em?

No. With a warrant or a subpoena, PayPal has to release that information so an arrest may be made.

Which then brings back the issue of who gets the police involved?

In this particular instance I think the police could easily get involved, there are a number of people affected, they have a source of where the information was gathered from, an investigation could and should be launched.

Perhaps some of you affected members could approach your local police and explain the situation to them? They may be able to point you in a direction where a number of you can give the necessary info to help get things rolling.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354363)
Posted by Stormrider on March 2nd, 2012 @ 4:48pm CST

Burn wrote:
Autobot032 wrote:
Banjo-Tron wrote:
Burn wrote:Because as far as the merchant is concerned, they're customers not criminals, giving out data like that will be a breach of their privacy.

Oh OK. I assumed that the bank was the one that obscured their details, not the merchant. Does that mean that their identities are protected if, say, the police wanted to see 'em?

No. With a warrant or a subpoena, PayPal has to release that information so an arrest may be made.

Which then brings back the issue of who gets the police involved?

In this particular instance I think the police could easily get involved, there are a number of people affected, they have a source of where the information was gathered from, an investigation could and should be launched.

Perhaps some of you affected members could approach your local police and explain the situation to them? They may be able to point you in a direction where a number of you can give the necessary info to help get things rolling.

It is definitely a good idea, but probably won't warrant any attention from the police unless TFCC gets the police involved. Having gone through identity theft I can tell you first hand that the police don't consider fraudulent charges a serious crime unless you actually lose money.

Probably the best people to get involved in this is your State Attorney General and/or FBI. Most major cities have an FBI branch you can call and the State Attorney General you can reach via websites. They have the power to investigate especially where it affected a large number of people.

Does anyone else think it's more than a coincidence that these fraudulent charges went rampant at the time of the Runamuck/Runabout went on sale? Of all the places to hit on the internet - why a Transformers fan club and why at this particular period? I think the thieves are TF fans or have inside knowledge about TFCC.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354510)
Posted by Banjo-Tron on March 3rd, 2012 @ 2:48am CST

Sid Burn wrote:TFCC is giving out refunds on their memberships based on the remaining time on your membership

If we did this, would it forefeit our right to receive Runamuck? I suppose we could do it just after Runabout is shipped. I guess that would hurt FunPub some. I'm still surprised that Hasbro hasn't waded in on this debacle.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354512)
Posted by chuckdawg1999 on March 3rd, 2012 @ 3:01am CST

Banjo-Tron wrote:
Sid Burn wrote:TFCC is giving out refunds on their memberships based on the remaining time on your membership

If we did this, would it forefeit our right to receive Runamuck? I suppose we could do it just after Runabout is shipped. I guess that would hurt FunPub some. I'm still surprised that Hasbro hasn't waded in on this debacle.

I'm sticking with the club for the time being; I want Runamuck and hope to get Runabout at some point. (I really wanted Drift at first but only if he comes with the right guns)

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354517)
Posted by Burn on March 3rd, 2012 @ 3:55am CST

Banjo-Tron wrote:
Sid Burn wrote:TFCC is giving out refunds on their memberships based on the remaining time on your membership

If we did this, would it forefeit our right to receive Runamuck? I suppose we could do it just after Runabout is shipped. I guess that would hurt FunPub some. I'm still surprised that Hasbro hasn't waded in on this debacle.

Realistically the only thing Hasbro needs to do is decide whether to allow FunPub to retain the license for TF's or revoke it.

Hasbro don't really have a need to get involved in this situation, it's not their venture.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354578)
Posted by Sid Burn on March 3rd, 2012 @ 10:51am CST

chuckdawg1999 wrote:I'm sticking with the club for the time being; I want Runamuck and hope to get Runabout at some point. (I really wanted Drift at first but only if he comes with the right guns)

this is why FUNPUB probably wont do that much to improve in the future, these exclusives have gone from being a nice addition to a collection, to being necessary to complete the G3 lineup.

TFCC has collectors by the balls with this approach.
(not flaming, I used to be a collector like this)

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1354713)
Posted by chuckdawg1999 on March 3rd, 2012 @ 7:44pm CST

Sid Burn wrote:
chuckdawg1999 wrote:I'm sticking with the club for the time being; I want Runamuck and hope to get Runabout at some point. (I really wanted Drift at first but only if he comes with the right guns)

this is why FUNPUB probably wont do that much to improve in the future, these exclusives have gone from being a nice addition to a collection, to being necessary to complete the G3 lineup.

TFCC has collectors by the balls with this approach.
(not flaming, I used to be a collector like this)

I don't NEED the figure but I'd like to have him. Depending on the QC and what goes down in the next year with the club we'll see if I renew next year. I'd hate for Hasbro to come in and strip everything from FunPub as I think that will mean the end of Joe and Bot Con and the advent of Hasbro con.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355118)
Posted by Seibertron on March 5th, 2012 @ 12:25pm CST

Here is a message we just received from Hasbro regarding recent situations with Fun Publications, the organization which runs the Transformers Collectors' Club, BotCon (the official Transformers convention), G.I. Joe Collectors' Club, and JoeCon (the official G.I. Joe convention).

Hasbro wrote:To the G.I. Joe and Transformers fan communities and Fun Publications customers,

Thank you for bringing your concern to our attention and for giving Hasbro the opportunity to respond to a matter that impacts its G.I. Joe and Transformers brands. Please know we take all consumer concerns very seriously and are in regular contact with Fun Publications (our licensee) about the possibility of a breach in security to their online purchasing system for the G.I. Joe and Transformers Collectors' Clubs. Fun Publications is also taking this matter very seriously and is diligently working at identifying any problems, the number of customers affected and ways to ensure it does not happen to any more customers. Hasbro wants consumers to have a positive experience at all touch points for its brands, including transactions with its licensees. As such, we are confident that Fun Publications has detailed instructions and pertinent information available for those consumers who believe they may have been targeted by credit theft via their portals.

Based on our extensive conversations with the Fun Publications team Hasbro wants to convey the following to the fan communities:

Fun Publications has assured us that they are taking necessary measures to curb additional issues, and they are working with third party experts to identify the problem. They anticipate knowing and communicating the cause of the breach as soon as possible to those affected.

-- They believe that the number of customers affected is low relative to the volume of sales transactions made.

-- However, if you believe fraudulent charges have been made to your credit card after making a purchase with any portals for the G.I. Joe or Transformers Collectors' Clubs, we urge you to contact Fun Publications immediately and provide them with the information requested at <https://www.transformersclub.com/tccccinfo.cfm> or <http://gijoeclub.com/ccinfo.cfm> by using the "Contact Us" link at the bottom of these pages.

-- Fun Publications can also be reached at the following number for additional consumer affairs inquiries relating to the G.I. Joe and Transformers Collectors' Clubs at (817) 448-9863 during regular business hours.

-- As more information becomes available, they will be contacting all affected customers who have notified them about the issue.

Thank you again to all of the fans of our Transformers and G.I. Joe brands for their continued support and for the opportunity to respond to this matter.

Sincerely,

Joe Moscone
on behalf of Hasbro, Inc.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355123)
Posted by Delicon on March 5th, 2012 @ 12:43pm CST

I applaud Hasbro for making a public statement on this matter, although the line below is pretty appalling to me.

Hasbro wrote:-- They believe that the number of customers affected is low relative to the volume of sales transactions made.

If you're talking about the last year, then maybe but since February...YIKES.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355124)
Posted by Jelze Bunnycat on March 5th, 2012 @ 12:44pm CST

In short, Hasbro is sticking its head in the sand. :lol:

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355128)
Posted by Seibertron on March 5th, 2012 @ 1:01pm CST

Delicon wrote:I applaud Hasbro for making a public statement on this matter, although the line below is pretty appalling to me.

Hasbro wrote:-- They believe that the number of customers affected is low relative to the volume of sales transactions made.

If you're talking about the last year, then maybe but since February...YIKES.

I hope Hasbro understands that that can't be true. It appears all of our account and payment information was stored in a local database. The entire database would have been hacked. Either the hackers would have grabbed all of the info or none of it. It was just sitting out in the open, as far as hackers would be concerned. Anyone who had used a credit card with them in the past few years was affected.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355131)
Posted by RiddlerJ on March 5th, 2012 @ 1:09pm CST

I demand free toys! :grin:

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355138)
Posted by Heavy B on March 5th, 2012 @ 1:35pm CST

RiddlerJ wrote:I demand free toys!

I demand a G2 ramjet. Even though no charges were made on my card, and I canceled said card (awaiting a new one...) but damn I want Ramjet

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355140)
Posted by Genocide G2.0 on March 5th, 2012 @ 1:40pm CST

Just another message full of whitenoise, give us a free botcon exclusive and it might just take the sting away.....hmmm or would that be another kick in the teeth.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355142)
Posted by Tigertrack on March 5th, 2012 @ 1:42pm CST

I guess I don't know what I was expecting, but more corporate BS when I had two credit cards tank because of this was not it.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355143)
Posted by madplanet on March 5th, 2012 @ 1:44pm CST

It is too bad that the whole story is not being shared/told. Still it is bad to hear that ex members were getting hit also.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355146)
Posted by Daggor on March 5th, 2012 @ 1:49pm CST

Not only does the "not too many were hit" line sting, the Fun Pub logo next to the Hasbro logo amplifies the fact that Fun Pub's logo is terrible. It is an uninspired imitation of the Hasbro logo done in, perhaps, Microsoft Word. Terrible. Unprofessional. Appropriate.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355153)
Posted by Rated X on March 5th, 2012 @ 2:08pm CST

As much as I love bashing Hasbro, Im gonna side with them on this issue. Even Alcatraz security was breached at one point. Pointing fingers is not important anymore. What is more important is making sure it never happens again. And also to reimburse those who were affected. Maybe a free years membership would be appropiate. It's not like every time somebody hacks people's info from a gas pump or ATM machine do you get an official company statement. Life goes on... >:oP

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355158)
Posted by Tigertrack on March 5th, 2012 @ 2:17pm CST

Rated X wrote:As much as I love bashing Hasbro, Im gonna side with them on this issue. Even Alcatraz security was breached at one point. Pointing fingers is not important anymore. What is more important is making sure it never happens again. And also to reimburse those who were affected. Maybe a free years membership would be appropiate. It's not like every time somebody hacks a gas pump or ATM do you get an official company statement. Life goes on...

So SONY was not issuing all kinds of warnings and public statements when they got jacked? I think they were.

One years membership $40, credit card fraud charges $4000. Hmmm... Not that most cc companies won't remove the charges if you can prove that it is fraud. If they won't you should get a new card.

Moving on for some after this is easy. For others whose finances are a but more crunched...not so much.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355161)
Posted by Kibble on March 5th, 2012 @ 2:23pm CST

I think the Club should give their customers the same thing TFsource did after their multiple fiascoes... >:oP

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355169)
Posted by AutobotCliffjumper on March 5th, 2012 @ 2:37pm CST

Hasbro wrote:-- They believe that the number of customers affected is low relative to the volume of sales transactions made.

Seriously? Pull your heads out of the sand! Plenty of people got hit. It's unbelievable that the amount of customers affected were "low". Poppycock! :-x

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355172)
Posted by Seibertron on March 5th, 2012 @ 2:49pm CST

tigertracks 24 wrote:
Rated X wrote:As much as I love bashing Hasbro, Im gonna side with them on this issue. Even Alcatraz security was breached at one point. Pointing fingers is not important anymore. What is more important is making sure it never happens again. And also to reimburse those who were affected. Maybe a free years membership would be appropiate. It's not like every time somebody hacks a gas pump or ATM do you get an official company statement. Life goes on...

So SONY was not issuing all kinds of warnings and public statements when they got jacked? I think they were.

One years membership $40, credit card fraud charges $4000. Hmmm... Not that most cc companies won't remove the charges if you can prove that it is fraud. If they won't you should get a new card.

Moving on for some after this is easy. For others whose finances are a but more crunched...not so much.

It's not about whether or not other companies have had similar issues. One of the major problems with all of this is that simple steps were not taken to protect our information. It was due to their negligence that this happened. Our passwords weren't even protected ... that's some pretty basic stuff right there. If care couldn't be had to protect our passwords, how could we expect that our credit card information was protected. The fandom has complained about the late 1990s style website for quite some time ... this was the consequence of their website not being updated properly circa 2006 to use modern standards and modern requirements that the credit card companies have in order to be PCI compliant.

Big companies get hacked because they are big targets. I'd imagine the hackers who gained entrance to the systems that huge companies like iTunes and Sony use are hackers on the cutting edge of figuring out where security holes are. Big companies such as those two most likely do not have our passwords just sitting around unencrypted and they are most likely PCI Compliant. Comparing what happened due to the negligence of Fun Pub is apples and oranges to what has happened to the larger companies.

Even your passwords on Seibertron.com are encrypted ... there's no way for me to decrypt the passwords here.

Re: Another TF Club / Fun Pub Security Update - cancel your card numbers and change your passwords! (1355176)
Posted by Seibertron on March 5th, 2012 @ 2:51pm CST

Kibble wrote:I think the Club should give their customers the same thing TFsource did after their multiple fiascoes...

Have any of you considered that TFsource only had one situation. From what I understood, the second situation was never actually tied to TFsource. Perhaps the second issue which people assumed came from TFsource actually came from another source that we all regularly use.

Click here to view additional comments about this topic at the Energon Pub Forums ...