Cable Forum - Security breach play.com

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - Security breach play.com (https://www.cableforum.uk/board/showthread.php?t=33676078)

richard1960

22-03-2011 10:38

Security breach play.com

Hi just recieved an email from play.com to say their systems have been compromised and certain customers emails and names may have slipped out.

Dear Customer.

Email Security Message

We are emailing all our customers to let you know that a company that handles part of our marketing communications has had a security breach. Unfortunately this has meant that some customer names and email addresses may have been compromised.

We take privacy and security very seriously and ensure all sensitive customer data is protected. Please be assured this issue has occurred outside of Play.com and no other personal customer information has been involved.

Please be assured we have taken every step to ensure this doesn’t happen again and accept our apologies for any inconvenience this may have caused some of you.

Customer Advice

Please do be vigilant with your email and personal information when using the internet. At Play.com we will never ask you for information such as passwords, bank account details or credit card numbers. If you receive anything suspicious in your email, please do not click on any links and forward the email on to privacy@play.com for us to investigate.

Thank you for continuing to shop at Play.com and we look forward to serving you in the future.

Play.com Customer Service Team

OH dear:(. Just posting in case anyone has not seen this.

BenMcr

22-03-2011 10:40

Re: Security breach play.com

Just as well I use a unique email address for play.com Will be able to see where any Spam emails come from

Hom3r

22-03-2011 10:45

Re: Security breach play.com

Becareful this could be a scam and not from play.com

This is the header I get

Quote:

Delivered-To: my email addy
Received: by 10.43.63.84 with SMTP id xd20cs13625icb;
Mon, 21 Mar 2011 16:00:07 -0700 (PDT)
Received: by 10.151.43.15 with SMTP id v15mr4392782ybj.170.1300748407185;
Mon, 21 Mar 2011 16:00:07 -0700 (PDT)
Return-Path: <v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com>
Received: from mail1274c.newsletters.play.com (mail1274c.newsletters.play.com [74.112.64.38])
by mx.google.com with ESMTP id p5si15057377ybk.8.2011.03.21.16.00.04;
Mon, 21 Mar 2011 16:00:07 -0700 (PDT)
Received-SPF: pass (google.com: domain of v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com designates 74.112.64.38 as permitted sender) client-ip=74.112.64.38;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com designates 74.112.64.38 as permitted sender) smtp.mail=v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com
Received: by mail1274c.newsletters.play.com (PowerMTA(TM) v3.5r16) id hgvc7e0iiksj for my email addy; Mon, 21 Mar 2011 18:55:27 -0400 (envelope-from <v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com>)
Date: Mon, 21 Mar 2011 18:55:27 -0400 (EDT)
From: "Play.com" <info@play.com>
Reply-To: info@play.com
To:my email addy
Message-ID: <28465150.102901231300748127168.JavaMail.?@rbg03.pd kp1>
Subject: Important: Email Security Message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_36685_27335354.1300748124270"
x-mid: 4793444
List-Unsubscribe: <mailto:v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com?subject=Unsubscribe>

is

Return-Path: <v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com>

a valid play.com address?

BenMcr

22-03-2011 10:46

Re: Security breach play.com

Not sure how it's a scam. There is nothing in it asking for information, and the only e-mail address in it is a valid play.com one

It has also gone to the correct email address I used for play.com as well

Hom3r

22-03-2011 10:51

Re: Security breach play.com

Quote:

Originally Posted by BenMcr (Post 35197300)

True but if you get any emails from "play.com" asking you to click on a link, DON'T. Goto the play.com site via you own explorer.

Graham M

22-03-2011 10:52

Re: Security breach play.com

Quote:

Originally Posted by Hom3r (Post 35197298)

Becareful this could be a scam and not from play.com

This is the header I get

is

Return-Path: <v-ejcege_fiodecco_kghklao_kghklao_a@bounce.newslette rs.play.com>

a valid play.com address?

Looks like it, it goes to an account on the play.com domain

BenMcr

22-03-2011 10:53

Re: Security breach play.com

Quote:

Originally Posted by Hom3r (Post 35197302)

True but if you get any emails from "play.com" asking you to click on a link, DON'T. Goto the play.com site via you own explorer.

Had no plans to lol

Kymmy

22-03-2011 11:10

Re: Security breach play.com

It's a genuine email..

Moved to the Security forum

dilli-theclaw

22-03-2011 12:35

Re: Security breach play.com

More info

http://www.theinquirer.net/inquirer/...ecurity-breach

Zing	22-03-2011 13:19

Re: Security breach play.com

this information is often leaked/sold by data collecting companies. Most of us in one way or another are on such a list somewhere. This info can net those selling it quite a bit of money.

There is always a option to tick when you register anywhere 3rd party blar blar some is a tick to opt in and other ( the crafty ones) are tick to opt out which means if you aint read it properly and assume its a tick giving permission your data is on a list

Sky for example is an opt out company you actually have to deny permission or by default your info is shared

LSainsbury

22-03-2011 20:22

Re: Security breach play.com

More info here at BBC News

deadite66

22-03-2011 20:40

Re: Security breach play.com

Interestingly gmail let this through without flagging as spam.
related to the play email leaks?

[img]Download Failed (1)[/img]

Toto	22-03-2011 21:07

Re: Security breach play.com

Quote:

Originally Posted by deadite66 (Post 35197784)

Interestingly gmail let this through without flagging as spam.
related to the play email leaks?

http://dl.dropbox.com/u/7618572/Laut...tification.png

Probably because the spam email was sent over a compromised network that has a valid SPF record. Google will give a lot of positive weight to a spam or phishing email if it has SPF:PASS in the header.

Kymmy

22-03-2011 22:09

Re: Security breach play.com

Another email from PLAY.COM

Quote:

Dear Customer,

As a follow up to the email we sent you last night, I would like to give you some further details. On Sunday the 20th of March some customers reported receiving a spam email to email addresses they only use for Play.com. We reacted immediately by informing all our customers of this potential security breach in order for them to take the necessary precautionary steps.

We believe this issue may be related to some irregular activity that was identified in December 2010 at our email service provider, Silverpop. Investigations at the time showed no evidence that any of our customer email addresses had been downloaded. We would like to assure all our customers that the only information communicated to our email service provider was email addresses. Play.com have taken all the necessary steps with Silverpop to ensure a security breach of this nature does not happen again.

We would also like to reassure our customers that all other personal information (i.e. credit cards, addresses, passwords, etc.) are kept in the very secure Play.com environment. Play.com has one of the most stringent internal standards of e-commerce security in the industry. This is audited and tested several times a year by leading internet security companies to ensure this high level of security is maintained. On behalf of Play.com, I would like to once again apologise to our customers for any inconvenience due to a potential increase in spam that may be caused by this issue .

Best regards,

John

John Perkins
CEO
Play.com

Hom3r

22-03-2011 22:31

Re: Security breach play.com

I got the second email, and OK I was wrong, but better safe than sorry.

---------- Post added at 22:31 ---------- Previous post was at 22:16 ----------

If you get any suspicious emails that appear to come from Play.com

Quote:

It has also requested that any suspicious messages be forwarded to privacy@play.com.

I tend to only get 3 emails from them IIRC

1. General promo's
2. Order placed/received
3. Order dispatched.

And I spend a LOT of cash there, and will continue to do so.

MadGamer

22-03-2011 22:35

Re: Security breach play.com

So are they genuine or fake?

Kymmy

22-03-2011 23:13

Re: Security breach play.com

They're genuine but I think that PLAY.COM got the wrong end of the stick and sent out the initial post without finding out exactly what had happened

Welshchris

23-03-2011 13:16

Re: Security breach play.com

i got one of these to didnt know wheather it was true or not.

dragon

23-03-2011 22:02

Re: Security breach play.com

Quote:

Originally Posted by richard1960 (Post 35197294)

Customer Advice

Please do be vigilant with your email and personal information when using the internet. At Play.com we will never ask you for information such as passwords, bank account details or credit card numbers.

Oh Really, that could sure make ordering something an interesting experience then :erm:

Should really state that their customer service personnel will never ask for things like passwords, bank details, CC numbers.

Their site however is most definitely going to ask for passwords/credit card numbers, they seem to have this strange expectation when a customer orders something that the customer actually pays for it... Can't think why that is :angel:

I admit it's rather pedantic of me, particularly from someone who has terrible spelling and grammatical accuracy but for some reason I find things like that rather irritating

All times are GMT +1. The time now is 18:54.