DVD Pacific Security Breach
 

Looks like customers of DVD Pacific have been getting bogus $40 charges from "LIP, INC." DVD Pacific did the "deny, deny, deny" thing until the evidence was overwhelming, at which point they began blaming grand, international conspiracies.

Here's where I have been following the story:
DVD Pacific Credit Card Fraud via AnimeOnDVD.

Re: DVD Pacific Security Breach
 

I'm not surprised. As someone mentioned over on the forum you referenced, DVD Pacific doesn't mask CC#'s with asterisks. They leave it in the input text box in plain view. This is a ridiculous practice.

I checked out my CC info right after reading the thread on AOD a few days ago.

:up: for bringing it to light here on DVD Talk!

I closed my membership/acccount with them a week ago. Hope it did actually remove my personal info from their database.

The CC fraud is not limited to Lip inc,.

Today I noticed three strange transactions on my CC statement, which I did not authorize.

Kag* Info.Kagi.Com
Katy's Cookies
Primustelecomm Service

I would appreciate if anyone recognize any of these on their CC statement as well.

That story has got me worried.

I just checked my MC account and its clean, thank goodness.

Indeed there's lots of people having these strange transactions made to their Credit Cards (mainly VISA) from Finland, Sweden, Norway, Denmark, Germany, Australia including myself. Hope this clears up soon, DVDpacific is great place to get R1 DVD's.

A lot of unhappy, ripped-off Spanish customers too.

Looks like I spoke too soon. I found a charge for $7.95 from ibill on my MC today. Gave them a call and found out there's also a charge for $34.95 in the pipe. They're going to credit my account with the charges. Also called my CC issuer and they are closing the account and giving me a new account number.

I got hit too by the Lip, Inc charge. As did two of my friends. You can add Ireland to the list of countries hit.


Cancelled my cards and my bank/cc company have refunded me the offending charge.

Kevin -

Got the same exact charges on my visa. I already disputed the charges before I called iBill who said it was for subscription to porno comics. They are issuing a credit. There is a more recent charge from Yahoo Auctions. Visa has closed the account and issued a new number.

First time this happen to me and I'm now no longer secure buying online.

http://www.dvdplaza.com.au/forums/sh...9&pp=15&page=1

This is a good thread about this fraud.

If you add the people who have been hit by this from the Australian, the British, the German and the Scandinavian boards it seems that hundreds of people have been hit - all of them DVDPacific customers.

A few people from the German DVDMessageboard have been hit with charges of 2000 US$ and more.

And this is still going on - people are still getting hit every day.

Here's the German thread for any German DVD Talk members:

http://forum.dvd-inside.de/showthrea...9&page=1&pp=30

What number did you use to contact iBill? I had my Mastercard hijacked last month. Luckily Citibank caught it and let me know, stopping all the charges but the iBill one. If iBill will refund it back I would certainly rather dispute it there than go through the hassle with Citibank.

My MC is from Citibank too. Anyway, the number for iBill is 800-307-3558.

The latest from DVDpacific -

8/18/2004
-----------------
Dear Elijah W. Ryel,

Our web site has recently been subjected to various hacking attempts. We upgraded our security measures in lieu of this to ensure the
personal information we hold for you is fully protected. Part of these security enhancements have provided us information that led us to
believe that some data had been compromised by way of a worm on the server. No anti virus or spyware was able to detect this but we now
have information that contact had been made with an IP address outside our network. We attempted to capture this information without it
leaving the server so as to determine exactly what was being transmitted. Unfortunately this worm had some type of self detection available
and as soon as it realized we had discovered it, it self destructed leaving no trace evidence.

Yesterday the IP addresses we suspected behind this launched a malicious code attack on our SQL server and this allowed us to track their
IP addresses to their source and we have identified ISP’s in Russia and the Ukraine. We have contacted the FBI, Secret Service and filed
a full report at www.us-cert.gov. Further a report has been filed with FSB.ru.
We have blocked any possibility of this type of attack being successful but as a
precaution we have auto updated all member account access passwords and now sending you your new temporary password as indicated
below.

Your Login - MEMEMEMEMME
New Password – MINEMINEMINE

We would also request that you pay particular attention to your credit card statement to ensure that your not subject to any fraudulent
transactions and if so notify your credit card issuer immediately. We will be providing a list of all cards we have on file to each of the credit
card issuers so as they can also monitor any suspicious activity.

We will continue to monitor this situation closely as we have been since it arose and you can be assured our efforts to provide you with the
safest shopping environment online will always be of the highest priority.

If you have any questions in relation to this issue please direct them to [email protected]

Regards,
DVD Pacific Inc.
Customer Information Support
www.dvdpacific.com
www.cdpacific.com
www.adultdvdpacific.com

So, these morons at DVD Pacific are actually emailing people's usernames and passwords? And sending them together?

-ohbfrank-

I wouldn't shop at that site if it was the last place on earth.

Morans.

Looks like I got hit too. Some charge of 10.55 from "3D NET ZONE" on 08/16. I went ahead and got the dispute taken care of, and my card cancelled.

Also went ahead and cancelled my account with dvdpacific as well. Didn't really think anything about it before this. Stupid me.

I got hit also for $10.55 from 3d net zone.


I wish I had never heard of dvdpacific. I wonder if they are involved or just stupid :(

I was going to make a purchase with them, many months ago (before the National Geographic deal) but then decided against it.. seeing that I was unable to delete my credit card info, and not emailing them to "delete" my account, I ended up putting in a fake credit card number so that my real one wasn't saved..I wonder if some person got screwed because I had put a number that wasn't mine because I didn't want it there...

Unless the other person also had your name, that's not possible (and it's unlikely that you would hit upon a valid CC number and expiration date combination).

I closed my account a few days after the Dvd deal was posted and I still got hit be this.

Do not trust them at all.IMO.

I got hit with a $10.55 charge from ezigatroweb on 08-14. I just cancelled my cc.

Yep, for all their talk of having now secured their systems, they still don't have a clue about how to do security right.

Does anyone know when DVDPACIFIC's site was hacked? I signed up on the 17th, and the next the day, I received the email about the fraud.

I had a charge from ezigatroweb for the same amount, posted to my account on 8/9 for an alleged 8/6 purchase. GRRRR! :mad: So should the card-issuer be able to reverse this charge (in my case it's actually a combo Visa/debit card linked directly to my checking account!)?