Animates breach confirmed tonight

Forums › IT Pro and developers › Animates breach confirmed tonight

jonherries

1108 posts

Uber Geek

Trusted

Subscriber

#257226 20-Sep-2019 20:56

Got an email tonight telling me there was a breach at animates. From the email:

Through our investigation to date credit/debit card data has been targeted through the breach. Any personal information shared with us may have also been impacted by the incident. This could include your address, phone number, email address, username or password.

No indication of whether this data was hashed.

alasta

4791 posts

Uber Geek

Trusted

Subscriber

#2321778 21-Sep-2019 06:40

So, did the attackers succeed in obtaining credit card details, or did they try and fail?

It's quite unclear from the text above.

jonherries

1108 posts

Uber Geek

Trusted

Subscriber

#2321789 21-Sep-2019 08:13

Yes, it is unclear, they have told people to check their credit card bills - but not to cancel their cards.

Jon

turtleattacks

124 posts

Master Geek

#2321804 21-Sep-2019 08:22

It's probably a compromised CMS with a keylogger.

Similar to how British Airways got done.

rxy

1 post

Wannabe Geek

#2323753 24-Sep-2019 10:40

I can confirm that credit card details were compromised.

Have just had our credit card cancelled after a pretty decent charge was made to an off-shore business and bank picked up on it (maxed out our card).

I would recommend you cancel your credit cards.

Have just signed up to let you all know.

bazzer

3316 posts

Uber Geek

Trusted

#2332895 8-Oct-2019 17:58

rxy:

I can confirm that credit card details were compromised.

Have just had our credit card cancelled after a pretty decent charge was made to an off-shore business and bank picked up on it (maxed out our card).

I would recommend you cancel your credit cards.

Have just signed up to let you all know.

I second this. My card was just compromised with a big charge to Ticketmaster US. I guess it's possible it could be unrelated, but seems like too much of a coincidence.

richms

23683 posts

Uber Geek

Trusted

Subscriber

#2332911 8-Oct-2019 18:30

This is why that BS with websites hosting the payment page on themselves, or worse still in an iframe from the payment provider needs to stop. I understand that some marketing "genius" thought it was a good idea because people dont see the address change to something else, but screw that, I want to see it change to someone else that is probably competent instead of a cut price web developer that probably has 40 different plugins on the site.

Also glad that I always use paypal instead when offered. I think my animates purchases were all outside the range anyway, but if not I would have been fine since they never get to see anything useful when using paypal.

Richard rich.ms

bazzer

3316 posts

Uber Geek

Trusted

#2332951 8-Oct-2019 18:57

richms: Also glad that I always use paypal instead when offered. I think my animates purchases were all outside the range anyway, but if not I would have been fine since they never get to see anything useful when using paypal.

Really not sure why I didn't use paypal this time around. Kicking myself, just because it's a hassle updating CC details everywhere etc. I'm kind of glad my card has been compromised now so I can get it replaced and stop monitoring it so closely. 😁

networkn

23496 posts

Uber Geek

Trusted

Lifetime subscriber

#2332960 8-Oct-2019 19:11

So this was presumably Animates website and online purchases rather than transactions in-store?

turtleattacks

124 posts

Master Geek

#2332963 8-Oct-2019 19:13

networkn:

So this was presumably Animates website and online purchases rather than transactions in-store?

Online transactions only. Furthermore only transactions where you provide your credit card details on their site rather than a third party payment processing service such as PayPal or Paymark.