Digital Eyes sent my credit card information through email!
#1
DVD Talk Hall of Fame
Thread Starter
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like
on
1 Post
Digital Eyes sent my credit card information through email!
I was checking my email this morning only to find a strange message in my inbox with the following subject: "Delivery Status Notification (Delay)." When I opened the message I found out it was about an order I placed last night at Digital Eyes. Looks like the postmaster was trying to send the email to [email protected], but for some reason the message couldn't be delivered and was being forwarded to me.
But the most disturbing part was the message contained my complete credit information along with the order details. I find it very troubling that Digital Eyes is using email to send credit card information. This was only my second order at Digital Eyes but will probably be my last since I don't consider email a very secure method of protecting my credit card number.
I was also curious if anyone else received one of these emails? Below is a partial copy of the message without my personal information attached.
But the most disturbing part was the message contained my complete credit information along with the order details. I find it very troubling that Digital Eyes is using email to send credit card information. This was only my second order at Digital Eyes but will probably be my last since I don't consider email a very secure method of protecting my credit card number.
I was also curious if anyone else received one of these emails? Below is a partial copy of the message without my personal information attached.
From: postmaster@win19488 Add to Address Book
To: xxxxxxxxxxxxxxxxxxxx
Date: Thu, 1 Jan 2004 08:38:04 -0500
Subject: Delivery Status Notification (Delay)
This is an automatically generated Delivery Status Notification.
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipients has been delayed.
[email protected]
To: xxxxxxxxxxxxxxxxxxxx
Date: Thu, 1 Jan 2004 08:38:04 -0500
Subject: Delivery Status Notification (Delay)
This is an automatically generated Delivery Status Notification.
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipients has been delayed.
[email protected]
Last edited by Laser Movies; 01-01-04 at 12:45 PM.
#5
Senior Member
Join Date: Sep 2002
Location: Naperville, IL
Posts: 663
Likes: 0
Received 0 Likes
on
0 Posts
I am looking into this and will get this solved in a few minutes. The credit card details should not have been sent through an e-mail. I am sorry for this inconvenience.
Mark
Digital Eyes
Mark
Digital Eyes
#6
DVD Talk Hall of Fame
Thread Starter
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like
on
1 Post
I like to get an answer to what exactly is going on. From what I can tell it appears that order information is forwarded to the email address I mentioned in my initial post. For some reason it wasn't, I'm assuming because of full email account, and the message was sent to me because of the problem. However why is my order even being forwarded to another address? It doesn't give me much confidence in your site thinking my billing address, complete credit card number, and expiration date are being sent unsecurely through the internet.
#7
Senior Member
Join Date: Sep 2002
Location: Naperville, IL
Posts: 663
Likes: 0
Received 0 Likes
on
0 Posts
The order confirmation had been CC'd to my e-mail address across our local network (never outside across the internet). Due to a glitch with our mail server the message had been delayed and sent back to you. The credit card info has only been in those messages for a very short time due to a mistake in my coding. This has been removed and there is no information going across our local network containing a credit card number let alone across the internet.
I am sorry that I made this mistake. We have never had payment information compromised from our site or customers. I take this very seriously and the message data has been removed.
Mark
Digital Eyes
I am sorry that I made this mistake. We have never had payment information compromised from our site or customers. I take this very seriously and the message data has been removed.
Mark
Digital Eyes