Soooo... Monoprice....

[q011519]

Yeah, so I'm sure everyone knows were this is going....

Bought a wall mount from them like a month ago (love it btw).


Got an email from my bank last night telling me they detect some suspicious activity. It was late when I saw the email so I didn't bother looking until this morning. So... yeah. Someone charged $3k on my card. Gotta love Bank of America though. They were on top of their stuff. They didn't let it go through and all it took was a 10min call to get a new card.

So if you bought something from Monoprice.com during their whole website getting hacked period. Get a new card....


I'm not mad at Monoprice, I liked what I got and may shop there again in the future. I don't know if they ever owned up to it thou I think they kept saying they couldn't see a problem. Correct me if I'm wrong please.

There's already discussion of this here.
Admin allisolm

 

[SunnyD]

Repost. But cool to know.

 

[Aharami]

it's though
and I don't know if I'll be shopping at monoprice again. My CCs don't have the one-time use numbers anymore, and I wouldn't feel comfortable handing over my CC# to them

 

[MiniDoom]

it's though
and I don't know if I'll be shopping at monoprice again. My CCs don't have the one-time use numbers anymore, and I wouldn't feel comfortable handing over my CC# to them

paypal?

 

[SpatiallyAware]

I'm still annoyed that they didn't notify any of their customers.

 

[Aharami]

paypal?

viable alternative. didn't know they took that though. In light of this, I change my mind. If I can use paypal or google checkout, I will shop at monoprice

 

[tomt4535]

viable alternative. didn't know they took that though. In light of this, I change my mind. If I can use paypal or google checkout, I will shop at monoprice

They accept both paypal and google checkout.

 

[CRXican]

we know

 

[jlee]

http://forums.anandtech.com/showthread.php?t=2057186&highlight=monoprice

 

[KeithP]

The thing that is bad about the Monoprice situation is that, as far as I know, they have not complied with notification laws about a security breach. I think they are getting around this because their "forensic experts" did not find any evidence of a breach meanwhile, they are overhauling their system anyway.

I think it is clear there was a breach at Monoprice and that they are not owning up to it. Which, IMHO, makes the problem worse.

Personally, I won't be using Monoprice anymore. Not because they had a security problem but because of the way they handled the problem.

-KeithP

 

[onza]

I REALLY hate the fact they still claim nothing on their end caused this mass chaos.

SITE IS DOWN.. then no real solid updates after that.

Terrible business practice.

 

[olds]

I use PayPal there and I never leave money in my PayPal account.

 

[Vette73]

I filed a complaint with the BBB and this is what Monoprice has come back with...

Dear Jason Williams: Our outside investigators have continued to review log files from our Internet-facing servers. To safeguard you from any damage that may result from the potential data theft, and because protecting your personal information is important to us, we have engaged Kroll Inc., the world’s leading risk consulting company, to provide you with its ID TheftSmart™ service. This service includes 12 months of Enhanced Identity Theft Restoration services, at no cost to you. It takes a few days for them to set up the service, so it won't be available until Thursday, April 1st, 2010 or so. As soon as it becomes available, I'll send your Membership ID and their help-line phone number, so that they can assist you further on this matter. Again, truly sorry for what happened and any inconvenience it may cause you. Thanks for your understanding and being patient. Best regards, Jong (Sean) Lee Monoprice, Inc. Direct. 909-912-1311 Initial Response Summary We will send out letter to customers and offer KROLL ID TheftSmart service to make it up. Thanks.

 

[olds]

I filed a complaint with the BBB and this is what Monoprice has come back with...

Dear Jason Williams: Our outside investigators have continued to review log files from our Internet-facing servers. To safeguard you from any damage that may result from the potential data theft, and because protecting your personal information is important to us, we have engaged Kroll Inc., the world’s leading risk consulting company, to provide you with its ID TheftSmart™ service. This service includes 12 months of Enhanced Identity Theft Restoration services, at no cost to you. It takes a few days for them to set up the service, so it won't be available until Thursday, April 1st, 2010 or so. As soon as it becomes available, I'll send your Membership ID and their help-line phone number, so that they can assist you further on this matter. Again, truly sorry for what happened and any inconvenience it may cause you. Thanks for your understanding and being patient. Best regards, Jong (Sean) Lee Monoprice, Inc. Direct. 909-912-1311 Initial Response Summary We will send out letter to customers and offer KROLL ID TheftSmart service to make it up. Thanks.

Now we have your name......

 

[JoPh]

how is paypal/google check out more secure?

 

[Vette73]

Now we have your name......

OH NOES!!

I work for the Fed Gov, you could get a lot more than my name with a simple FOIA request. :awe:
Let alone my name is published anytime I make job annoucments on Monster/USAJobs. That and there are 4 Jason Williams just as State Dept I know. In fact one of them has the same middle Initial as me. :thumbsdown:

 

[Vette73]

If your CC has been breached PLEASE file a complaint here...

http://ag.ca.gov/contact/complaint_form.php?cmplt=CL

Its the CA attorney general office. If they get enough they will look into Monoprice and force them to conform to SB20, its the CA notification law

 

[Aharami]

how is paypal/google check out more secure?

paypal or google processes the payment (either from your bank acct or your CC) and sends the money to monoprice. monoprice doesnt see your CC info, thus your CC is protected (unless paypal or google is hacked...then you're just fucked)

 

[Juddog]

If you didn't store your credit card number on their site for your account, would it still have been compromised?

 

[Slick5150]

how is paypal/google check out more secure?

None of your financial info is stored @ Monoprice. You essentially pay Google/Paypal, and they pay Monoprice. So if someone did hack Monoprice's data, they'd get nothing of use from your account info.

i've ordered many many times from Monoprice and used Google Checkout every time, and so I could care less that they seem to have been compromised.

 

[Vette73]

If you didn't store your credit card number on their site for your account, would it still have been compromised?

I never store my CC at any site yet it was breached after shopping at MP. So I have to say yea in this case.

So if you made a order in the last couple months, maybe more?, then keep a eye out or request a new card.

 

[Juddog]

I never store my CC at any site yet it was breached after shopping at MP. So I have to say yea in this case.

So if you made a order in the last couple months, maybe more?, then keep a eye out or request a new card.

Ah crap that sucks... ok I'll have to figure out which credit cards I used with the site now. I never stored my credit card number on their site so I was hoping I wouldn't be caught up. What a pain.

 

[Q]

Luckily everything I have purchased from them I used Paypal as payment.

 

[Gunslinger08]

Guess I should check my cards.

 

[evident]

is it safe to buy from them now?