Warning!!!!!!!!!!!!!!!

[CutTheLoop]

Since the Florida ASA ProAm shoot, I have several friends who attended have reported credit card theft, charges for plane tickets to India, $900 withdraws from ATM machines, big ticket item purchases etc.


IF YOU ATTENDED THIS SHOOT, YOU MAY WANT TO CONTACT YOUR CC COMPANY....NOW.

Some of these charges occurred the day of, and some are still occurring as of yesterday.

Some are thinking it was related to Hotel charges, but few of them stayed in the same place, or ate at same restaurants etc. Yet, there are too many similarities otherwise, for this to be random occurrence.

[Daniel Boone]

ABOK was just telling me this happen to him.


Art said the stuff bought on his is going to Irving.

DB

[jame]

Man that is some crazy stuff. I will definatly have to check into that tommorrow. I will pass on the info tonight.

THANKS ALOT FOR LETTING US ALL KNOW.
Jame

[ABOK]

They used my CC info on early Monday morning and tried to do a bunch of internet purchasing. Most of it didn't go through because the ship to address was different than the card address. They were having items shipped to Irving, Tx.. Whoever was trying to use my credit card had my home phone number and my address!!!!! I hope they get caught.....

[SandSquid]

Originally Posted by ABOK

They used my CC info on early Monday morning and tried to do a bunch of internet purchasing.

should be easy to track down since most secure purchasing site use MAC and IP logging... Subpoena the router logs and your going to jail, or you can staked out, spread eagle, buck naked on top of a red and hill and smeared in honey, while 100 meters down range of the next Clout Shoot.....

[Chris]

Oh that's terrible...when they find them, get a rope and a tall tree.

[Archerdad]

That has to suck. I am always amazed at how goofy people can be. Hope everything gets straightened out for you guys.

[jame]

Get the address to the place your stuff was being shipped to in Irving. We can track down who ever it is. I only live about 1.5 hours from there.
I say lets take care of it ourselves. If they want to go back to INDIA then we can make sure they are sent back in a box. JK.


Hope everything works out Art. Keep us updated.
jame

[CutTheLoop]

What all these folks need to be doing, is contacting the State of Florida Attorney Generals office.

This is probably very widespread, and their info could help aid in tracking down these dirtbags.

[CutTheLoop]

The ball is rolling...

If you experienced credit card fraud in Gainesville, please contact me and tell me all of the places you used or presented your card info while you were there. My email address: mtyrell@asaarchery.com
Thanks,
Mike@ASA

[J.A.G.]

saw on another sight that someone said it was ASA that was hacked. Soo, be careful, I am sure they will get it worked out.

[red44]

We've been fighting ID theft and CC fraud for 2 years. I second the tall tree. They should not be allowed to live, and I'm not JK.

[ABOK]

Originally Posted by jame

Get the address to the place your stuff was being shipped to in Irving. We can track down who ever it is. I only live about 1.5 hours from there.
I say lets take care of it ourselves. If they want to go back to INDIA then we can make sure they are sent back in a box. JK.


Hope everything works out Art. Keep us updated.
jame

My credit card co. took care of everything immediately and nothing has been charged to me, thank goodness!!!! The only 2 places that I used my credit card where they would have my home phone number and home address was a RV campground I stopped at on the way home in Memphis and the ASA. I'm guessing it came from the ASA side since all these other people also had problems. I'm not pointing fingers or laying blame on anyone, I just want to make sure this doesn't happen again to me or anyone else for that matter.

I may just have to go back to paying cash and writing checks. The internet companies wouldn't give me the address in Irving Tx. where they were trying to ship the items. They said they would give that info to the authorities.

Thanks for caring buddy!!!!!

[SandSquid]

Originally Posted by ABOK

The internet companies wouldn't give me the address in Irving Tx. where they were trying to ship the items. They said they would give that info to the authorities.

Yes, that is as it needs to be. As I said earlier, they may (quite likely) even require a subpoena from the authorities to protect their own azzes. Also they are protecting the criminal from vigilante justice and themselves from liability.... Lets say they did give you the address and you decided to go pay these stellar individuals a visit in person. And some bad ju-ju went down, since after-all what otehr purpose would there be for such a visit? The criminal (or their survivors) sues you for beating them to a pulp, and the Co. for releasing their private information to you which gave you the ability to go beat them to a pulp.

They did their job and protected you, the rightful CC account owner, from fraudulent charges. beyond that do not expect anything else from them.

[Mike Leiter]

This also happened to me and I wasn't at the ASA or any thing related to it. It also happened to two others that I know of that attended the shoot in Lancaster.

My guess is that some database that we all use got hacked and the numbers were stolen. These thieves will try to buy everything they can online and then they'll try to sell whatever they can get away with on ebay or some other site.

I'm sorry that ATM's were hit and that anyone lost any money. I was luck and the bank stopped it right away because it was flagged for suspicious activity.

[CutTheLoop]

Originally Posted by Mike Leiter

This also happened to me and I wasn't at the ASA or any thing related to it. It also happened to two others that I know of that attended the shoot in Lancaster.

My guess is that some database that we all use got hacked and the numbers were stolen. These thieves will try to buy everything they can online and then they'll try to sell whatever they can get away with on ebay or some other site.

I'm sorry that ATM's were hit and that anyone lost any money. I was luck and the bank stopped it right away because it was flagged for suspicious activity.

True

This could very well be from a single db, or one very large shared db. Some have even suggested the info was sold. Not as likely.

It is however; likely someone was hacked(really doesn't take much) by a very determined organized effort, based on the scale of it, and it is probably larger than we realize.

What is troublesome, is for someone to insist it was not their site or system that was compromised, having been hacked does not imply they would be culpable, but denial will certainly leave people with a false sense of security going forward...

there's not a lock made or password strong enough to keep out a truly determined thief... they have a multitude of dirty tricks, most of them are simple human social engineering(usually works and is great way to gain Admin level access to online info), in today's wireless world, some of this information can literally be sucked right out of thin air, even using what we thought yesterday, was solid encryption.

One of their easiest tricks is spoofing, they send an email that looks completely legit...say from Paypal or Bank of America, has the paypal or Bof A logo and all sorts of other legal mumbo jumbo on it... asking you to change or verify your account password and other personal info.

Some people unknowingly click right along and fall for it, having missed that part on any legitimate sites information and/or terms of service.

Golden Rule for 99.9% of them : THEY WILL NEVER, NEVER, NEVER..under any circumstances, NEVER, NEVER, NEVER...did I say NEVER?.... send you an email or call you asking you to verify or change your password. So if you received communication asking to do so............. DON'T DO IT.


I see stuff like this everyday in my profession...yes, even still in 2010. You think people would learn by now. When your network guys are stressing one more time, like we have for 10-15 years now... if you receive an unsolicited email with an attachment....DO NOT OPEN THE ATTACHMENT.... guess what, inevitably someone ALWAYS opens the attachment.. That is a type of social engineering I mentioned.... they, the bad guys, know someone out there, somewhere is dying to open one.


Simple rule and lesson to be learned...

If it looks like a duck, quacks like a duck, and waddles like a duck... don't give that duck your credit card info.

[CutTheLoop]

Update:

This applies to everyone who has used a credit card through the ASA office in the last few years. We retain credit card numbers on our database to expedite call processing. In some cases the numbers on file are over two years old, and have expiration dates from 2008 or before.

It would appear that our main database was compromised in Gainesville due the availability of their WIFI network and a new laptop computer that was WIFI enabled.

This does not affect anyone who used our on-site credit card processing system, only those who had a credit card on-file with our office.

Please check your credit cards and look for any suspicious activity beginning with February 4th. Report it to your credit card company and notify us with the last four digits of your card.

We apologize for this breach and are working to assist the authorities in their investigation.

Mike@ASA





http://asaarchery.com/news/index.php...pper&Itemid=29

[SandSquid]

Originally Posted by CutTheLoop

they have a multitude of dirty tricks, most of them are simple human social engineering.

Sounds to me like you've been to the Certified Ethical Hacker course ;-)

[CutTheLoop]

Originally Posted by SandSquid

Sounds to me like you've been to the Certified Ethical Hacker course ;-)

Among others.


Been doing this a while now. You almost need a Psychology degree to do this job anymore.

[Slippy]

Originally Posted by CutTheLoop

Since the Florida ASA ProAm shoot, I have several friends who attended have reported credit card theft, charges for plane tickets to India, $900 withdraws from ATM machines, big ticket item purchases etc.


IF YOU ATTENDED THIS SHOOT, YOU MAY WANT TO CONTACT YOUR CC COMPANY....NOW.

....

Things like this are exactly why I quit shooting competitive 3-D.

Hope all is made right for those of you who got ripped off and hope the culprit/s is brought to justice.

[master Cleatus]

aime and I where hit too...$2,700 worth...lucky for us,,our bank was ontop of it...and already returned our money....

[ba3darcher]

I checked with my cc nothing unusual yet, went ahead and closed account anyway to be on the safe side.

[CutTheLoop]

Hate to make light of such a serious situation... but 'someone' was hit for $2700.... down payment on a new Kawasaki.


Somewhere out there, is a motorcycle salesman looking for a new job.

[mobowdoctor]

Originally Posted by Slippy

Things like this are exactly why I quit shooting competitive 3-D.

Hope all is made right for those of you who got ripped off and hope the culprit/s is brought to justice.

guess you better stop eating out since i had my # stolen and hit for 6000.00 in online items
It happend by some one working in a resturant we ate in
its just the world now, nothing to do with archery or shooters

my bank card is used for large buys no limit just whats in there
lucky i did not get to the bank that day to put in a deopsit i just got on the next job. the bank covered my money till they got it back.
good luck all I know its a hardship

[Holy Smokes]

Originally Posted by Slippy

Things like this are exactly why I quit shooting competitive 3-D.

Hope all is made right for those of you who got ripped off and hope the culprit/s is brought to justice.

Thtat's good Slippy
At least it wad'nt tha wind

[mobowdoctor]

Here is some new news
It was not the ASA that was hit
http://asaarchery.com/news/index.php...pper&Itemid=29