NuTSR Financial Data Breach

The ongoing saga of “TSR3” continues as Justin LaNasa, owner of “TSR LLC”, allegedly stores and has emailed to others a spreadsheet containing customer financial information stored without any form of encoding or encryption. In a video released by Don Semora of Wizard Tower Games, Semora claims Justin LaNasa emailed him a spreadsheet in May 2022 that included financial information from...

The ongoing saga of “TSR3” continues as Justin LaNasa, owner of “TSR LLC”, allegedly stores and has emailed to others a spreadsheet containing customer financial information stored without any form of encoding or encryption.

tsr3.jpg

In a video released by Don Semora of Wizard Tower Games, Semora claims Justin LaNasa emailed him a spreadsheet in May 2022 that included financial information from customers and business partners including full names, email addresses, home addresses, phone numbers, and even credit card numbers, all stored in plain text with no encoding or encryption. This includes customers of TSR or Dungeon Hobby Shop’s webstores purchasing products including Cult of Abaddon, Dungeon Crawl: The Board Game, TSR Dice, and others.


Screenshots of the spreadsheet (with private information redacted) show up in the video starting at the nine minute mark.

Wizard Tower Games also commented in the EN World thread “The Full & Glorious History of NuTSR” offering to confirm if anyone’s personal information was part of the spreadsheet he received. According to David Flor, transactions with the companies are processed under the name “Port City Kava”, an oxygen bar and vape/ecig store run by Justin LaNasa in North Carolina.

For those unfamiliar with the Saga of the TSR Trademark, EN World has a timeline of events with links to more information going back to the start in June of 2021 and, at the time of writing, updated through July 22, 2022.

The video from Semora is the most recent entry in a back-and-forth between himself and LaNasa following a Twitter post from Wizard Tower Games on August 29 confirming the company received two subpoenas related to the lawsuit with Wizards of the Coast. Michael K. Hovermale, former employee of TSR LLC, confirmed he also received a subpoena related to the lawsuit and confirmed in a post on EN World that he retained all information from his time working for LaNasa and informed LaNasa of this in June of 2022. In a video titled “OPEN LETTER LANASA” posted on September 1, Don Semora says he received a text message from LaNasa accusing Semora and Hovermale of “photoshopping documents”. The video consists of Semora posting screenshots of documents he claims were sent to him from LaNasa. In response, LaNasa claimed the documents in the video were Photoshopped by posting his own screenshots and calling Semora a "liar" on social media including in the title of a channel on the TSR Discord server, according to a screenshot from the private server posted by Kim Wincen. Semora responded with the video posted earlier today containing the spreadsheet along with other screenshots.

The trial between TSR LLC, the Dungeon Hobby Shop Museum LLC, and Justin LaNasa v. Wizards of the Coast is scheduled for a jury trial in October 2023.
 

log in or register to remove this ad

Darryl Mott

Darryl Mott

Dioltach

Legend
I have to say that if I got one email from Person A saying "These people have spread your credit card info into the wild" and an email from Person B saying "NO I DON'T HE'S LYING," the very first thing I'd do is check with my credit card company to see if it had been misused, and then cancel the card and get a new one. Either Person A actually is lying and has a grudge, in which case for all I know they may be trying to spread my info to incriminate Person B, or Person B is lying and there was a breach. And in both cases, better safe than sorry.
If Person A is lying but you believe them, the worst that can happen is that you've spent time and effort blocking your card and getting a new one. If Person A is telling the truth but you believe Person B, well ... I know which course of action I'd take.
 

log in or register to remove this ad





Dioltach

Legend
Actually, a "personal data breach" under the GDPR means a "breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed".

But regardless, the GDPR only applies in the EU, not the US. (Unless the US also has one that I've never heard of?)
 

Wizard Tower Games

Publisher of cool games
This was posted also in the main TSR thread.

As of this morning. September 6, 2022 I have made certain videos private. I have done this to number one preserve them, and number two as I have been asked to do so by those far above my pay grade.

I also will be updating via video about this mess, as very quickly this morning very good things happened, and there is now a dedicated concerted effort to ensure that the truth is maintained, facts and evidence are not deleted or altered and certain persons we shall refer to him as "Vodermort 2.0" is dealt with in a manner that is legal, proper and fair.

The systematic deletion of Discord information this weekend by Voldermort 2.0 has been documented and validated very quickly. Discord does not mess around to official requests.
 



BrontideTheBold

First Post
After reading all this mess, I'd hate to give these folks 1 red cent but... Can't someone "buy" TSR from these jokers and do something constructive with it? It's a shame to let a mark with its weight and legacy to be trapped by people like this.
 

Related Articles

Remove ads

Remove ads

Top