Rpgnow creditcard information stolen


log in or register to remove this ad


DanMcS

Explorer
Nightfall said:
Dan,

Uhm because people want free money? ;)

By "they", I meant "rpgnow". They don't actually need free money, they take a cut of pdf sales :p

Looks like the first thread I linked to has been pulled. Basically, a guy googled his own name, and got a hit to a page which is cached in google which had the name and credit card he had used to purchase stuff from rpgnow or rpgshop.

He reported he could google for his credit card number and get a hit as well, but that's a really bad idea, because any number of proxies, http referrer logs, etc will then have your credit card number in them, since your query to google is sent in plain text. So don't google your credit card number.
 

Nightfall

Sage of the Scarred Lands
Oh I thought you mean steal not store...

Anyway if they don't they don't know where the money is or even if it exists.
 

catsclaw227

First Post
DanMcS said:
Reported on rpg.net, and confirmed by Steve Wieck. I wonder why they store creditcard numbers at all.

This sucks, for sure. I just logged into rpgnow and they don't seem to have a place to edit/modify your credit card data via the My Account console. Is this normally only available during checkout?

I can't remember if they have my credit card data, and I don't know which card I used. I hope we find out soon.

And I also wonder if, in the merger, the credit card data was combined between RPGNow, DTRPG and Enworld Gamestore. That would really suck if all three were now affected.
 


catsclaw227

First Post
Unbelieveable!!! I just googled my name and I got a cached page from some hacker site that showed a TON of credit card numbers, addresses, and names from rpg now.

You won't believe how many there are. WHO CAN I CONTACT ABOUT THIS?!?

It says it was cached on Google on Nov 23rd 2006, so the numbers have been available since then.
 

DanMcS

Explorer
catsclaw227 said:
Unbelieveable!!! I just googled my name and I got a cached page from some hacker site that showed a TON of credit card numbers, addresses, and names from rpg now.

You won't believe how many there are. WHO CAN I CONTACT ABOUT THIS?!?

It says it was cached on Google on Nov 23rd 2006, so the numbers have been available since then.

Google has a contact page. Report the search you used and what you found in their cache, and ask them to remove it.

RPGnow already knows, obviously.

Check that credit card carefully for unwanted charges; contact the CC company itself via their phone help or something for advice about what to do. You may want/need to cancel that number and get a different one issued.
 


JEL

First Post
catsclaw227 said:
Unbelieveable!!! I just googled my name and I got a cached page from some hacker site that showed a TON of credit card numbers, addresses, and names from rpg now.

You won't believe how many there are. WHO CAN I CONTACT ABOUT THIS?!?

It says it was cached on Google on Nov 23rd 2006, so the numbers have been available since then.

Your best course of action is to call your card issuer and have them cancel that account right away (be sure to explain why you're doing it). Then go back through your statements to make sure you don't find any unaccounted for purchases. If you do, then report these to your issuer as well (likely you'll get your money back).
 

Remove ads

Top