MY CARD # WAS STOLEN!!!!!!!!!!!!

[alyash]

Hey Guys,

 

I have had my Cap 1 Plaitinum card for about 4 months, and I used it for the first time yesterday to pay off my 17.45 CJ account. I get home from my Grandma's funeral today, and I have a message from the Capital One fraud dept. Someone had used my card # in EUROPE at a number of places, totaling almost $600. The only way they could have gotten my number is from the CJ site. Good thing they don't know my CL!

 

 

BEWARE!

[Shawnee]

Before assuming CJ's site was compromised, run this free malware scan from Trend Micro on the computer you used to make the payment. You want to be sure your computer is not compromised with a trojan.

 

http://housecall.trendmicro.com/

[alyash]

Thanks, Shawnee. It's scanning right now.

 

Actually, I am running my Mcafee, that should be just as goo, right?

 

This has never happened to me before. How in the hell could someone gotten a hold of my card #? I thought that I took all appropriate percautions.

Edited January 6, 2006 by alyash

[Shawnee]

Thanks, Shawnee. It's scanning right now.

 

That caught a keylogger on DW's computer. Fortunately she had not entered any CCs in a while. Doing some research I found where she got it, on a website using what is known as "drive by downloads".

[pryan67]

well, seeing as this is like the 3rd post in a couple days about this sort of thing, I'd be VERY cautous about putting ANYTHING into CJ's website...

 

we haven't heard of any issues with OTHER websites...or anyone else with cards being stolen recently...other than those that were used only for CJ

[alyash]

Wow. Now I am going to be afraid of doing anything online anymore. I do all of my banking and bills online! I will run that one when Mcaffee is done doing its thing. I am pissed! Never thought that this would ever happen to me. I guess it's a good thing they didn't rack up the card. I guess they were on their way though. I had a 7500 cl and I only put 17.45 on it!

[alyash]

well, seeing as this is like the 3rd post in a couple days about this sort of thing, I'd be VERY cautous about putting ANYTHING into CJ's website...

 

we haven't heard of any issues with OTHER websites...or anyone else with cards being stolen recently...other than those that were used only for CJ

 

 

Actually it was DH's suggestion that it was a CJ employy that stole my CC#. Could this be the case? Anyone have their phone #?

[Shawnee]

well, seeing as this is like the 3rd post in a couple days about this sort of thing, I'd be VERY cautous about putting ANYTHING into CJ's website...

 

we haven't heard of any issues with OTHER websites...or anyone else with cards being stolen recently...other than those that were used only for CJ

 

I missed those other reports. If this is the third, someone needs to get in touch with CJ and inform them they have a problem. Either their web site is compromised or they have a dishonest employee.

 

This is why I only use Citi's virtual account numbers online. I know not everyone can get a Citi card, but for those that can don't pay online any other way.

[Shawnee]

Thanks, Shawnee. It's scanning right now.

 

Actually, I am running my Mcafee, that should be just as goo, right?

 

This has never happened to me before. How in the hell could someone gotten a hold of my card #? I thought that I took all appropriate percautions.

 

Some trojans manage to get past AV software. In DW's case the keylogger got past AVG. It never hurts to run another vendor's scan just to be sure.

 

Judging from Pryan's post three recent similar incidents lead me to believe they have a problem.

[alyash]

I tried to search, and I couldn't find any other posts about this...could someone please post a link and/or a phone #?

[SlickCredit]

i think someone stole mine a while back, i went to a jewelry store, high end one and the lady asked for my address and what not and it was my debit card and after that, like a few weeks or month later they drained it. i think it was that lady, and she was the manager. said i should give info so i can get offers in the mail, bs, never got any. shady, and they are like high-end (cartier)/tiffanys). now all i use is CC cuz i dont mess with that debit crap no more.

[pryan67]

I'd suggest anyone that's had this happen call CJ (yep..call, but follow up with a letter) and get the CSR's name...file a formal complaint with them...and keep records of who you talked to and what was said, etc....

 

 

here's another thread about it

 

http://creditboards.com/forums/index.php?s...146436&hl=crown

 

I know there was at least one more...can't find it though

[Shawnee]

Irving TX (972) 659-9770

 

Arlington TX (817) 640-1120

 

Those are the two numbers for them in the yellow pages. I'm not sure which one you need, but if you call one you should be able to find out who to call for their online sales.

[moriah]

I guess I should be happy I've been paying CJ with Paypal (I can't believe I just said that).

[pjm]

My card # was stolen right after I paid my CJ account. Before my account was stolen, the only thing I did differently was pay CJ.

[bradk]

well i guess i'm lucky so far. i think i paid my downpayment with a CC but that was early Dec and I've been okay so far. guess i'll pay the balance via Paypal.

 

the only weird things other than them not reporting yet is that they made my balance $516.55 instead of $16.55 but I emailed them about that and they fixed it.

[moriah]

One other thing:

 

Are you guys using IE?

 

Did you pay CJ after the 0-day exploit regarding the Graphics Rendering Engine was discovered, but before the patch came out?

 

If so, one of CJ's advertisers or a pop-up that happened before then could have installed malware on your PC through the GRE exploit.

[pjm]

I was using IE. I usually use firefox, but it would not process for some reason.

Edited January 6, 2006 by pjm

[jazzie142]

I'm a little concerned. I am using Nortion Antivirus, Microsoft Anitspyware and Spysweeper am I at risk for malware?

[alyash]

Thanks for the numbers. I'll call in a minute. Maybe we should all call at the same time so that they know that it is indeed them.

 

I am not using IE. I alwaws use AOL, SE at that.

 

Mcafee has been scanning since I started this post, and it hasn't picked up a thing.

[alyash]

I was using IE. I usually use firefox, but it would not process for some reason.

 

 

Actually, for some reason, my debit would not go thru on CJ's site yesterday. Error code 99. That is the card that is stored. I am so glad that it wasn't my bank card that got stolen! So I did have to keystroke my CC # into the site yesterday.

[Shawnee]

Thanks for the numbers. I'll call in a minute. Maybe we should all call at the same time so that they know that it is indeed them.

 

I am not using IE. I alwaws use AOL, SE at that.

 

Mcafee has been scanning since I started this post, and it hasn't picked up a thing.

 

From the other posts and the thread Pryan linked, either their site has been compromised or they have an employee stealing numbers.

 

Probably the first thing out of their mouths will be your computer is compromised, but you will be able to stop them with that nonsense having run two separate scans. Good luck!

[moriah]

Honestly, no matter what kind of protection you use, you are vulnerable to malware-spyware-virii.

 

I use F-Prot Antivirus (they are on a level with AVG and others), SpyBot Search and Destroy, and have SpyBot's process blocker/registry adjustment blocker installed.

 

I also am using a cable modem with a US Robotics router -- to block port scans.

 

Typically, the people most vulnerable to malware/spyware/virii are IE users (not neccessarily because IE is bad, but most exploits are written to be effective in IE since a majority of people use it) who use Outlook Express (OE is the most common mail program) on dial up connections (generally no firewall).

 

The only way to be truly immune to those threats is not to use a computer at all.

 

That's not acceptable to me.

[alyash]

I just called, and they said that I would have to e-mail them for all online inquiries.

[Shawnee]

I just called, and they said that I would have to e-mail them for all online inquiries.

 

So they basically don't offer customer service over the phone? That's nice.