Log in

View Full Version : Collector Club's Credit Card processors a definite leak - check yours



Paulbot
29th January 2012, 12:19 PM
...how secure is it really?

Not much. Currently on hold with my bank thanks to my credit card details having been stolen by someone thanks to this. :mad:

Zippo
29th January 2012, 01:57 PM
Wow
So does the club not use secure encrypton for handling credit card details. Its not the first time I have heard that cards have been compromised .. but in this day and age it shouldn't be hard.

Yet another reason to try and secure the figure from the secondary market

Paulbot
29th January 2012, 02:06 PM
They claim tom but what they do have is a flaky website/system for processing orders, that somehow when it was giving me errors instead gave my details, or allowed my details to be accessed, by someone else.

reillyd
29th January 2012, 02:49 PM
Not much. Currently on hold with my bank thanks to my credit card details having been stolen by someone thanks to this. :mad:

In the past, TFClub credit card orders have been quite incorrectly flagged as fraudlent by my credit card company, as they usually place an immediate charge for a few cents to verify that the card is valid for later billing. They aren't the only merchants to do this, of course, but before printing a bogus card and going into a store to buy lots of merchandise credit card thieves often do the SAME thing. Which means it looks suspicious.

Depending on your credit card company and level of protection, even purchasing from American merchants and then making a purchase from an Australian one can sometimes flag it. By the time the credit card company freezes the account, replaces the card, you might be without your credit card for several weeks. Which is a major hassle if you don't have eftpos cars to fall back on.

You have my sympathies.

griffin
29th January 2012, 06:55 PM
Check you credit cards people. Just in case.
I'm not sure why they are having security issues, as they do use 128bit Encryption on the site, but their charging service may be the leak.
I had a look today, and saw on my credit card, a charge from a week ago to a Music site that I've never heard of.

Paulbot
29th January 2012, 08:44 PM
The person who got my details used them with a Google Wallet account (something I didn't even know existed until this morning) and made purchases that were, mostly, micropayments, a few dollars at a time, which is why I didn't notice until I actually looked at my transaction history.

I'm not without a credit card for the next week, but do have my EFTPOS as a backup.

I have no doubt I'll get the money back, but the feeling of violation is unpleasant. So much so that I'm not going to get either the BotCon set or this year's club figures at all now, except via third parties as Zippo suggested. I just don't have faith in them at this point.

UltraMarginal
29th January 2012, 10:52 PM
Can I suggest that those of you who have had strange credit card actions since your dealings with the club email them and let them know that they may have a security breach somewhere.

If they aren't informed they can't do anything about it. and I'm sure they would like to avoid that sort of publicity.

Paulbot
29th January 2012, 11:05 PM
I left them an unhappy comment on Facebook this morning and directed an angry tweet at them. Then tonight a cooler head prevailed and I deleted the FB comment and emailed them telling them about the breach and explaining that was why I wouldn't be purchasing anything from them.

I agree others who've had problems should contact them too.

heroic_decepticon
31st January 2012, 04:00 AM
Ok, this is strange.

On 20 Jan 2012, I registered and got the confirmation from FunPub to say that all is sweet. Being paranoid, I checked to see if they charged my CC. They didn't charge it as of 25 Jan 2012, so I called them from SG. Appears that my CC has some block on online purchases (but then, why did the transaction "go through" in the first place?).

So I came back to HK, cleared the security issue and called them about it 1 hour ago. Still no cigar. Tried my wife's CC. Still no cigar. They then tried it manually, and it finally went through.

They told me that I'll likely have to go through the same process when I pre-order for Runabout (which I hear will be open for ordering soon). Gward save me!

On the plus side, their administrator has been very nice and polite throughout all these. :p

griffin
31st January 2012, 10:31 AM
One of my credit cards has the same security measure, but claim that they'll approve the payment first, and just lock the card until they can verify if it has been compromised.
It didn't help that this occurred at the same time as my main CC was being frozen for actually being compromised.

You should be able to ask your bank to relax its security settings, or get a new separate card with a small limit, that doesn't have restrictions, to use on foreign & online purchases.

griffin
1st February 2012, 02:43 PM
I left them an unhappy comment on Facebook this morning and directed an angry tweet at them. Then tonight a cooler head prevailed and I deleted the FB comment and emailed them telling them about the breach and explaining that was why I wouldn't be purchasing anything from them.

I agree others who've had problems should contact them too.

Are you, or were you ever a customer of Vodafone?
After talking about it with a few people at work yesterday, apparently there have been a lot of people who have had their details used since the security breach last year.
Both of my compromised cards have been used by Vodafone, for online purchases or bill payments.
Since one of those cards of mine is rarely used online, there weren't a lot of potential sources of breached security other than the Vodafone issue.

I'd recommend that anyone who has ever been a customer of Vodafone, if you haven't had your Credit Card compromised yet, see if your bank can issue you a new one (with a new number), stating the reason.

Paulbot
1st February 2012, 04:33 PM
Nope, Vodafone has never had my details. My problem started the day after my Botcon registration failed so I still put the blame in their direction.

griffin
4th February 2012, 03:34 AM
Okay, how about Playstation Network? I used at least one of my cards on there before they had their servers hacked and CC details stolen.

I'm not trying to say it isn't FunPub, but they do use encryption, and it would appear that they aren't the ones processing Credit Cards... and they just upgraded to a better processor of Cards too. So if it was their old Processing company that was a leak of details, this new one should hopefully be more secure.

(and I'd imagine that the turn-around of stolen details to being used, would be more than one day, as they need to be added to a list of card details and sold off - one of my two compromised cards wasn't used online (to get the 3-digit number off the back) since last April. To be used the next day, it would have to be someone at the Credit Card company copying down your details and using them, as FunPub don't appear to directly process or see your financial details when placing your orders)

griffin
4th February 2012, 02:17 PM
Here's an interesting news posting on Seibertron (http://www.seibertron.com/transformers/news/tf-community-warning-check-your-credit-and-debit-card-accounts-for-recent-fraudulent-activity/23883/), warning fans to check their cards... assuming that the previous TFClub Card processor was a likely leak.

(sorry for getting a bit off-topic - as this probably could go into a new topic if any more comments are added)

5FDP
9th February 2012, 09:59 AM
I have zero interest in TFCC toys but I was just reading all about the credit card scam reported over on TFW (http://www.tfw2005.com/boards/transformers-general-discussion/543525-fandom-card-issues-2-2012-a-20.html#post7241226). I hope no one here was affected.

Man, the brand has been taking a battering lately, what with the shoddy working conditions within the Hasbro factory, FE toys being cancelled for the rest of the world, DOTM toys not moving off the shelves here in Australia, and now a credit card scam for Fun Publications.

I'm quite disgusted that FP didn't bother to email their customers to let everyone know what was going on when they obviously knew admitting they had been contacted by concerned customers. Very poor customer service.

1AZRAEL1
9th February 2012, 02:08 PM
I am keeping a close eye on my CC just in case I see something fishy go on.

Hursticon
9th February 2012, 04:09 PM
I am keeping a close eye on my CC just in case I see something fishy go on.

A good thing too man; a growing number of International fans are making known their issues with having been breached and it seems the vast majority of which have occurred since paying for their TFCC club membership and/or TFCC exclusive figures. :o

Funpub have been horribly mishandling their ventures for both the franchises they utilise for business this year; I imagine that if enough fans make their issues known (As our US counterparts clearly often demonstrate) that Hasbro Corporate will surely be required to issue Funpub a "Please Explain" notice. ;)

Shirokaze
9th February 2012, 04:16 PM
A good thing too man; a growing number of International fans are making known their issues with having been breached and it seems the vast majority of which have occurred since paying for their TFCC club membership and/or TFCC exclusive figures. :o

Funpub have been horribly mishandling their ventures for both the franchises they utilise for business this year; I imagine that if enough fans make their issues known (As our US counterparts clearly often demonstrate) that Hasbro Corporate will surely be required to issue Funpub a "Please Explain" notice. ;)

It would be interesting to know if the issue has only occurred for those who sent emails or faxes of their credit cards. (Which I did, because I didn't want to miss out on the exclusives :mad: )

1AZRAEL1
9th February 2012, 04:27 PM
It would be interesting to know if the issue has only occurred for those who sent emails or faxes of their credit cards. (Which I did, because I didn't want to miss out on the exclusives :mad: )

I didn't do that, I didn't feel comfortable doing it.

Gutsman Heavy
9th February 2012, 04:32 PM
My card was ripped off that day after signing up, I guess I now know why.

Paulbot
9th February 2012, 04:57 PM
I had my credit card details stolen. It was used by someone else from the day after BotCon non-attending registration (http://www.otca.com.au/boards/showthread.php?p=283555&postcount=10). It's the first time my card details have ever been stolen, and it happened at the same time I used them on their site and had errors on their site, and drew a line between those dots.

I sent the Club a message and they have been using the information I could provide to investigate. I just wish I had taken a screenshot of the error message I saw when I submitted my order. They have been quite extensive in their emails about their investigations of my case.

I did decide not to order the Botcon set, the club exclusives or renew my membership.

Hursticon
9th February 2012, 04:58 PM
It would be interesting to know if the issue has only occurred for those who sent emails or faxes of their credit cards. (Which I did, because I didn't want to miss out on the exclusives :mad: )


I didn't do that, I didn't feel comfortable doing it.


My card was ripped off that day after signing up, I guess I now know why.

Here's a pair of links to each site's discussion threads on the subject for those interested. ;)

TFW2005.com (http://www.tfw2005.com/boards/transformers-news-rumors/543525-fandom-card-issues-2-2012-a-20.html#post7241226)
Seibertron.com (http://www.seibertron.com/energonpub/viewtopic.php?t=84092)

robwin1974
9th February 2012, 06:21 PM
My credit card got hit - small purchase of $20 then two big ones - cancelled card and will need to raise a dispute for the other two. All happened on 4 Febrauary 2012

I tried to renew my membership and also buy over-run but it didnt go through and never bothered to re-try.

I suggest that before you cancel - print out your statements and confirm what monthly charges you have so you can re-link to your new card (i.e. foxtel, insurance, gym etc.)

For peace of mind, it may be worthwhile to cancel if you think you are at risk

Quickstrike
9th February 2012, 09:08 PM
I've been checking my bank account everyday to see if the payment for Runabout had gone through (it has, hooray) and I haven't seen anything fishy yet.




Funpub have been horribly mishandling their ventures for both the franchises they utilise for business this year; I imagine that if enough fans make their issues known (As our US counterparts clearly often demonstrate) that Hasbro Corporate will surely be required to issue Funpub a "Please Explain" notice. ;)

I don't keep up with GI Joe stuff. What happened there?

Hursticon
9th February 2012, 10:07 PM
I don't keep up with GI Joe stuff. What happened there?

Neither do I but apparently, Funpub had set a certain date and place for the 2012 JoeCon; people paid for hotel bookings, flights and attendance fees (As you do) with plenty of time in advance. :)

Then, a weeks or so ago, Funpub decides to change both the venue and the date and you can imagine the complete cluster-f*** that ensued :eek:; people have had to pay up to $300US on top of what they've already paid just to be able to attend, some were paying a difference of $100 just in local flights so I'd hate to be anyone International who's attending. :o

For interests sake, you can get a run down from Hisstank.com (http://www.hisstank.com/gi-joe-news/conventions-9/joecon-2012-venue-date-change-11021/). ;)
(Out of Funpub's control, I'm sure :rolleyes:)

UltraMarginal
10th February 2012, 12:40 PM
I would like to add, in FunPubs defence, there have been many instances in the last year where Credit card Data was hacked from very large companies, Playstation Live and Vodaphone are examples that quickly come to mind.

instances where a card has had an unauthorised purchase straight after dealings with FunPub may be just a coincidence,
I have never had an issue with my Credit card that I have used with them and I have sent them an email with my drivers licence and CC scan. which was for my first store purchase from them.

coincidences are not any form of proof.

UltraMarginal
10th February 2012, 12:59 PM
FunPub have also made this (http://www.seibertron.com/transformers/news/fun-publications-statement-regarding-recent-suspicious-credit-card-activity/23955/)statement.

Hursticon
10th February 2012, 07:29 PM
FunPub have also made this (http://www.seibertron.com/transformers/news/fun-publications-statement-regarding-recent-suspicious-credit-card-activity/23955/)statement.

The main gripe that many fans have had though is FunPub's mis-handling of the situation; the vast majority of people simply wish that FP would send out a membership-wide email to notify those who aren't necessarily an active member of the community, i.e. a member of a forum/fansite/Facebook/Twitter, that a large number of members have reported being the victims of CC fraud and that one should keep an eye on one's CC account.

Instead, FunPub have issued the following on their website/Facebook & Twitter (Via .PDF (http://transformersclub.com/CCstatement.pdf)):

We have been receiving feedback that there has been a higher than
usual number of fraud complaints posted on online Transformers
forums.

While we have nothing to suggest that there was an issue with the TCC
and Fun Publications, we look into every concern that is sent to us. All
of your transactions are in a secure socket with the strongest encryption
available to any site on the web. If you have a specific concern about
any transaction with us, please use the “contact us” link located at the
bottom of the TCC page and provide us with as much information as
possible including:

1. The EXACT name of merchant as it is written on your statement.
2. Amount and date of suspect charge.
3. Bank your card is drawn on and if it is a debit or credit card.
4. Device and browser (and version) you used for your last payment
with us before you saw a fraudulent charge (ie, android phone,
computer, iphone, browser and version).
6. Were you on a public computer?
7. Were you on a public wi‐fi network?
8. If you were at home or work, what Internet provider did you use?
9. On your last transaction with us, did you receive any kind of error
message (card declined, 404 error, programming type error)? If you did
receive an error, how many times did you resubmit your information?

It is very difficult to track credit card fraud. With your help, we can see
if there are any parallels between those reporting an issue.

In order to better protect yourself, here are some guidelines:

Never log into a secure site from a public computer, public wi‐fi, or
through android/windows phones. Only use your mobile device on a
mobile app for transactions, never a browser. Turn off your bluetooth
and wi‐fi to prevent people from hacking your credit card information
from your phone/computer.

If you have a card that has an rfid chip, make sure your card is shielded
when not in use.

Always make sure you are using a secure socket (https://) for any login
that requires a password or a monetary transaction.

Never email your credit card information to anyone.

As should be common practice, on a regular basis, be sure to check your
statements and make note of any suspicious activity on your card. If you
see an unauthorized charge, turn it in to your bank or card company, the
charge will be reversed, they will issue a new card for you and the
security system in place will have done its job.

Please also take the time to read the attached article and research credit
card security. We are very aware that security concerns have risen
exponentially in the last couple years and we are doing our part to stay
ahead of the curve.

"Can Hackers Destroy the Internet?" - Forbes.com (http://www.forbes.com/sites/kenrapoza/2012/02/08/can-hackers-destroy-the-internet/?partner=yahootix)

I don't need to really say any more as all that needs to be said can be read here (http://www.tfw2005.com/boards/transformers-general-discussion/543525-fandom-card-issues-2-2012-a.html).
People are having their lives affected badly, so much so that a couple have had their rent payments bounce; the question has also been put forward - "What of the G.I. Joe members base?". :(

A massive, massive Public Relations Nightmare here. :o

uteiki
14th February 2012, 10:59 AM
hey guys,

for those who have used their credit card on TFCC Drift & Runabout, please check your credit cards again. Mine was just ripped off yesterday on purchases on AT&T and some dating website??? Had a call this morning from my credit card company. I am pretty sure its because of the TFCC purchases.

And no i have never sent them a copy of my details for the past few years at all.

- dan

1orion2many
14th February 2012, 11:06 AM
These people must have the worst security, Do they actually spend any money on their system:rolleyes:

Hursticon
14th February 2012, 11:56 AM
hey guys,

for those who have used their credit card on TFCC Drift & Runabout, please check your credit cards again. Mine was just ripped off yesterday on purchases on AT&T and some dating website??? Had a call this morning from my credit card company. I am pretty sure its because of the TFCC purchases.

And no i have never sent them a copy of my details for the past few years at all.

- dan

Very sorry to hear dude :(,
Seems a number of the members here have been hit in one way or another, which makes FunPub's dismissive (http://www.tfw2005.com/boards/transformers-general-discussion/543525-fandom-card-issues-2-2012-a.html) (Re: Cover Our Ass) response all the more insulting and infuriating for those affected. :mad:
(Counting myself lucky that I wasn't able to organise a Visa Debit in time or even really afford these figures. :o)

heroic_decepticon
16th February 2012, 02:43 PM
Here's an interesting news posting on Seibertron (http://www.seibertron.com/transformers/news/tf-community-warning-check-your-credit-and-debit-card-accounts-for-recent-fraudulent-activity/23883/), warning fans to check their cards... assuming that the previous TFClub Card processor was a likely leak.

(sorry for getting a bit off-topic - as this probably could go into a new topic if any more comments are added)

mates,

Just putting this out there as it seemed to have occurred to a number of people.

The Credit Card that I used to register for TFCC, pay for the box set and pay for Over-run has been fradulently used.

Bank called me this morning and there were 2 fradulent transactions, which they say were similar in pattern to other cardholders in HK (HSBC Premier Mastercard).

[1] "Strawberry.net" - USD$417
[2] "Merchandise" - USD$589

Just beware.

griffin
16th February 2012, 03:06 PM
(moved all these posts from two different topics into here)

1AZRAEL1
16th February 2012, 06:06 PM
Well so far, I haven't been hit. But I am keeping a real close eye on my CC anyway.

Now I may be lucky, I think their problems happened just before I signed up. When I went to sign up, the store was down. And hopefully they sorted the problem out before I did.

Hursticon
16th February 2012, 06:30 PM
Now I may be lucky, I think their problems happened just before I signed up. When I went to sign up, the store was down. And hopefully they sorted the problem out before I did.

I've read that cards have been hit even after they took down the sales to change their 3rd Party party payment handling service, so indeed be vigilant in your monitoring. :o

heroic_decepticon
16th February 2012, 06:37 PM
if the exclusives this year weren't so mouth-watering sweet, all these would almost be way too much trouble.

Bank is going to cancel my CC and reissue a new one, which will take a week. What a damn hassle

kup
16th February 2012, 08:05 PM
My card is ok but I knew that it was insecure going in as this problem with the club's security isn't exactly new.

Like heroic_decepticon, I wouldn't have joined the club at all if it wasn't for this year's exclusives - It was always somewhat lackluster and unfriendly to non-US members. I knew there was potential risk of having my card details stolen but since I hardly ever use credit (only for online purchases) and the card itself has a very low max amount, there was minimal risk.

kup
18th February 2012, 08:16 PM
I just had an anomalous entry in my CC transaction statement:

PENDING - PANDIGITAL DUBLIN CA

I called the bank and cancelled my card. They will be sinding me a new one in the next few days. The CBA lady told me that once the transaction processes from Pending, I will be able to dispute the transaction.

reillyd
21st February 2012, 07:29 PM
One day after giving my credit card details to Fun Pub to renew my transformer message, suspect transactions appeared on my card from US point of sale, and it was autoblocked by my bank.

It could be coincidence I guess. But I have the feeling that it is not.
Grrr:mad::mad::mad::mad:

Hursticon
21st February 2012, 08:32 PM
It could be coincidence I guess. But I have the feeling that it is not.
Grrr:mad::mad::mad::mad:

Sorry to hear dude, you too Kup; it's too coincidental to be a coincidence IMO. :(

Sharky
23rd February 2012, 03:29 PM
i Joined up to FUn Pub on tuesday

This Morning i get a Phone call saying on wednesday there was an Unauthorized Transaction attempt from a company called digital river for $2000.00 the transaction was denied due to insufficient funds as i only use this card for CC purchases i deposit the money required in it before i make the transaction


no other transactions were made. so Fub Pub or whoever they use is the only source for this "leak"

now i have to go through the hassle of waiting for a new one. and here i was hoping to buy twincast and soundblaster this week!!!

kup
23rd February 2012, 03:40 PM
i Joined up to FUn Pub on tuesday

This Morning i get a Phone call saying on wednesday there was an Unauthorized Transaction attempt from a company called digital river for $2000.00 the transaction was denied due to insufficient funds as i only use this card for CC purchases i deposit the money required in it before i make the transaction


no other transactions were made. so Fub Pub or whoever they use is the only source for this "leak"

now i have to go through the hassle of waiting for a new one. and here i was hoping to buy twincast and soundblaster this week!!!

The Club sucks. It's safer to deal with 3rd party smaller stores like RK, etc than the official source.

Paulbot
23rd February 2012, 04:06 PM
no other transactions were made. so Fub Pub or whoever they use is the only source for this "leak"

Make sure you tell them this. Email them. This goes for anyone who's been hacked lately and have used their service. They can't keep saying "it's not us" to everyone (but they will tell you its not them).

Demonac
23rd February 2012, 08:28 PM
There was an unauthorized transaction on my card about 2 weeks back, when this all started. I haven't used it with Fun Pub since Botcon last year though (I only used it 3 times since).

Ultra Streak
25th February 2012, 03:02 PM
This email went out to all members today:



This is going out to all members:

Fun Publications wants to take this opportunity to apologize to all of our members.

After many days of analysis, Fun Publications has determined that there is a security issue with our e-commerce systems. We appreciate all of you who have sent in your details. Your help has allowed us to ferret out several different patterns of fraudulent charges that have appeared on some members' cards (any that have been used over the last year with both the club store and our event registration system).

We have several different internet/networking companies looking into the matter. Unfortunately, as of yet, we have not been able to identify any forcible entry either into our internet service provider's servers or network. This is like chasing a ghost through the wires, as unfortunately, the perpetrator did not leave a trail, foot prints or finger prints.

For those of you who have been affected, we apologize for all of your time this has wasted and any inconvenience it has caused you. We understand your frustration as this same type of fraud has happened to everyone in our office on our personal credit cards at some point in the past. Our merchant services provider wants us to remind everyone that even though this can be a huge annoyance for you, the customer, your issuing bank will not hold you responsible for any fraudulent charges that might be placed on your card(s).

We know that this issue has been a huge topic of discussion on all of the boards for the past few weeks. However, we are required to investigate to determine and confirm a security issue thoroughly before making any public statements. This is why we put out a general alert statement two weeks ago.

Until the analysis is finished (can take several weeks) we don't know if the shut down by our former (Jan 31st) e-commerce provider caused the security issue or not. We do know that it has not been limited to those who have purchased before the change to our new provider.

Please, watch your cards closely as this type of security issue appears to be on the increase across the net. No site is 100% safe. You may want to consider having any cards you have used with Fun Publications in the last year replaced.

At this time, we do not know how long our e-commerce site will be offline for both the store and registrations. We will get back to you once we have a solution for this security issue.

Thanks for your support - Brian


Lucky for me, my card expired at the end of last year so if I was to be hit, it wouldn't have gone though.

griffin
25th February 2012, 03:26 PM
Hope they get it sorted out before the membership renewal cut-off is reached in 2-3 weeks... or else quite a few people are going to miss out on Runamuck and have more to complain to FunPub about.

Ultra Streak
25th February 2012, 03:31 PM
Totally. I went to renew my membership last night and got the shop closure message. I'm really gunning for this years member fig, seeing as I just ordered Over-Run.

loophole
25th February 2012, 05:43 PM
I used my brothers card to purchase the exclusive figures and surprise surprise someone from the UK tried withdrawing money from it, and the last time my brother used the card was around the same time as botcon last year.

liegeprime
25th February 2012, 05:57 PM
It's a wonder why they can't use Paypal payment system instead? It's a helluva lot secure and less hassle. It's like this club is living in the dark ages from what ive heard asking for fax copies of credit cards.. geez so passe and unsafe. That letter of apology, sorry but it's sounds rather quite insincere, basically it's just saying sorry but look after yourself - we cant do anything for you.... so much for their help when their the source and cause of all this misfortune...:mad::mad::mad::mad: I feel for those affected (as I myself have not joined and wont join this dysfunctional club)

Paulbot
25th February 2012, 06:23 PM
I'm happy to see that they found the problem and admitted it was them (and not our own errors).


Timing of transactions is always suspicious but, if you had just filled up your car, would you suspect the gas station?

Will still be a while before I am interested in dealing with them again... probably not until I want to go to BotCon again in a year or two.

liegeprime
25th February 2012, 08:04 PM
Just went to read the thread of this issue at tfw2005...... man the hate in that thread is palpable but I say very reasonable against FunPub. ;)

CC fraud amounting to hundreds of dollars and all the hassle with banks is just... too much and they won't even say they're sorry...... Wonder if they'd be lynch mobbed at the next Botcon, that'll learn yah:p

Quickstrike
25th February 2012, 08:11 PM
I haven't had a problem but I cancelled my card anyway. Better safe than sorry and all that.

dirge
25th February 2012, 09:14 PM
...so they say that they're working on a secure solution. It's staring them in the face - as liegeprime says - just accept paypal like 99% of other online merchants.

Hursticon
25th February 2012, 11:18 PM
...so they say that they're working on a secure solution. It's staring them in the face - as liegeprime says - just accept paypal like 99% of other online merchants.

Yep, you're dead right guys; not to mention that they'd like get a hell of a lot more people willing to become a member and purchase things if they had PayPal. :confused:
(Hell, I know I would :cool:)

But, at least it's a positive step that they've owned up to the responsibility, admitting that anyone who has made purchases since last year's BotCon registration could be compromised :eek:, but it is indeed funny how they stopped just short of apologising for what's transpired... :rolleyes:

Paulbot
1st March 2012, 05:01 PM
More emails today from the Club (http://www.seibertron.com/transformers/news/another-tf-club-fun-pub-security-update-cancel-your-card-numbers-and-change-your-passwords/24152/).

It no longer seems like just "a possible leak".

Their webforum is also now disabled, a new system will replace it.

Hopefully everyone here who's a club member has been keeping close watch.

This is a bit alarming too


The passwords in their database are not encrypted and it should be assumed at this point that all of our account information was taken along with our payment information

1orion2many
1st March 2012, 06:09 PM
I feel sorry for people on this forum who are members, This whole thing is a major debacle.

griffin
2nd March 2012, 02:25 AM
Since my membership expires on the 4th, I'm not likely to get any more updates after that day... so if they send out an email saying that their website store is back up (before the 16th), please do post about it here.
Thanks.

Gutsman Heavy
10th March 2012, 11:36 AM
Seems my bank has traced the leak back to fun-pub and hit them with a chargeback for the membership, fun pub has emailed me about it, suckers.

heroic_decepticon
14th March 2012, 03:14 AM
Don't want to beat on a dead-horse, but would like to add that so far every-single-person who I know on a personal basis and has ordered Over-run from FunPub has had their CC defrauded - that's people across Australia, Hong Kong and Singapore.

UltraMagnus
14th March 2012, 11:45 PM
Don't want to beat on a dead-horse, but would like to add that so far every-single-person who I know on a personal basis and has ordered Over-run from FunPub has had their CC defrauded - that's people across Australia, Hong Kong and Singapore.

Credit card company gladly refunded the money today :)
phew!
So the end this is what happened:
1) I purchased the membership April 2011 for Sideburn
2) Despite repeated emails I never was sent a toy nor was I sent a tracking number
3) I ordered Overrun and received it yesterday
4) At same time of ordering (a few months back) my bank said their was a fradulant claim.
5) Received my figures
6) Received my refund

Hursticon
15th March 2012, 12:02 AM
Hows sad it is that people are still being hit, especially seeing as though there are probably a hell of a lot of people who still know nothing about it. :(
Glad things have worked out for you guys though. :o

1AZRAEL1
16th March 2012, 08:07 PM
So is it people who ordered Over Run or everyone? I paid for a membership after I decided that I wanted the Runamuck as well because I was in the Sydney group order for Over Run. I have been checking my CC daily, nothing to report yet. Hope it stays that way.

kup
16th March 2012, 08:14 PM
So is it people who ordered Over Run or everyone? I paid for a membership after I decided that I wanted the Runamuck as well because I was in the Sydney group order for Over Run. I have been checking my CC daily, nothing to report yet. Hope it stays that way.

Anyone. There have been complaints about security with the Club's CC process for several months but they only took notice now after a huge bulk of members reported credit card fraud after joining the club.

Most of those members likely joined only because of Runamuck so if it wasn't for that exclusive and the huge amounts of simultaneous complaints, the problem would have likely continued unattended. Before the Club's policy was to blame the members for using their cards in other places 'insecurely'.

1AZRAEL1
16th March 2012, 08:26 PM
Well, seems I will keep a really close eye on the CC still. I check it daily so if anything pops up that shouldn't I can cancel it right away.

Decepticon
16th March 2012, 08:55 PM
A few weeks ago my bank phoned me to say my account had been 'comprimised'. Nothing had been successfully taken out. They cancelled my credit card and issued me a new one. It is only today after I read this thread that it could of been TFCC related.

I hope I get my toy:(

Sharky
16th March 2012, 11:38 PM
So is it people who ordered Over Run or everyone? I paid for a membership after I decided that I wanted the Runamuck as well because I was in the Sydney group order for Over Run. I have been checking my CC daily, nothing to report yet. Hope it stays that way.

I got slugged for signing up to the club. I know it was directly linked to TFCC as it was the only transaction in a 4 week period and it happened the day after the card was processed from Fun Pub

Digital River tried to slug me for 2000

Lucky I had insufficient funds....I only transfer money into that account for transactions like that!!!

fatbot
16th March 2012, 11:42 PM
Don't want to beat on a dead-horse, but would like to add that so far every-single-person who I know on a personal basis and has ordered Over-run from FunPub has had their CC defrauded - that's people across Australia, Hong Kong and Singapore.

you can change that mate, I haven't been stung

Hursticon
17th March 2012, 08:47 AM
TFCC/FunPub have released an update (http://www.seibertron.com/transformers/news/transformers-collectors-club-update-new-store-on-the-way-and-subscription-deadline-extended/24306/); Apparently a new store is forthcoming fairly soon as well as the registration date for membership being extended to the 21st of this month. :o

Zippo
18th March 2012, 08:51 AM
For those who did resign by calling them up, did you get charged $78 or $82 for the membership?