Go Back  DVD Talk Forum > Shopping Discussions > Store Forum
Reload this Page >

WARNING: Your DDD Details Are Not Safe! (merged)

Store Forum Share Your Shopping Experiences at Stores both Online and Off.

WARNING: Your DDD Details Are Not Safe! (merged)

Old 10-09-04, 12:48 AM
  #1  
Cool New Member
Thread Starter
 
Join Date: Oct 2004
Posts: 49
Likes: 0
Received 0 Likes on 0 Posts
WARNING: Your DDD Details Are Not Safe!


If you haven't logged into your DDD account in the past 24 hours -- DON'T!!!



I'm a long-time lurker, but this was enough to get me to actually register for posting.

I went to DeepDiscountDVD today to add some stuff to my wishlist and noticed that up in the top left corner, it said "Hello Veronica".

Seeing as though my name is not Veronica -- nor do I know any Veronicas -- I was more than slightly puzzled. I clicked on the account details to see what was up (thought maybe my account had been hacked), and there were all of Veronica's details -- Name, number, address, credit card info etc.

I clicked on 'order status' and was able to view her orders for the last 6 months.

Odd? It gets worse....

I refreshed the page. Now, I'm logged into the account of some guy in Oklahoma named Frederick.

Same deal -- I can access his entire account.

This happened five more times as I jumped from page to page on the site. Just as I'd be looking around to see what was going on, there would be a new "Hello..." message up where mine should have been.

That's seven accounts that I was logged into within half an hour!

If I were dishonest, or a complete asshole, I could quite easily have ordered a few DVDs from each of them for myself.

I copied the email addresses of everybody's account that I had access to and I emailed them about the situation.

Did anyone else encounter this today?!

Lord knows how many people had access to other people's accounts while it was happening. I'm just thankful my credit card on file with DDD expired a month ago.

Check your accounts, people. Make sure there are no unauthorized orders or any strange items in your shopping cart or wishlist.

EDITED:

PLEASE NOTE...

This problem seems to affect only accounts that are currently, or have recently been, logged in.

For example -- most of us are seeing each other's accounts because we are all logging in to change our information.

If you haven't logged into your DDD account in the past 24 hours -- DON'T!!!


Just leave it alone until DDD has fixed the problem and stated officially that there is no further risk. By logging in now, you're only opening your account up to others.

Again; if you haven't been there in the last 24 hours, don't worry about changing your account.

Last edited by SuburbanCowboy; 10-09-04 at 09:05 AM.
SuburbanCowboy is offline  
Old 10-09-04, 01:17 AM
  #2  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
This is bad! AND... this is not the first time this has happened with Deep Discount DVD!

I just went to their website and it says, "Welcome Christopher" and my name is Richard!! Like you, I went to account details and they belong to someone else! It also brings up a different account each time I hit the refresh button!

I have done some screen captures and plan to send them to DeepDiscoutDVD!

In the meantime, I am logging into my own account and replacing my credit card on file with zeros! I suggest everyone else do the same!
rich-y is offline  
Old 10-09-04, 01:23 AM
  #3  
Cool New Member
Thread Starter
 
Join Date: Oct 2004
Posts: 49
Likes: 0
Received 0 Likes on 0 Posts
Double post.

Last edited by SuburbanCowboy; 10-09-04 at 01:29 AM.
SuburbanCowboy is offline  
Old 10-09-04, 01:26 AM
  #4  
Cool New Member
Thread Starter
 
Join Date: Oct 2004
Posts: 49
Likes: 0
Received 0 Likes on 0 Posts
Also -- if anyone else is encountering this, please do the right thing and email the person whose account you have access to and let them know.

Just keep in mind that someone else may be viewing your details right now. And you'd hate it if you were kept in the dark.
SuburbanCowboy is offline  
Old 10-09-04, 01:31 AM
  #5  
DVD Talk Hall of Fame
 
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like on 1 Post
I just checked and didn't notice anything unusual with my account. However I have heard of this happening in the past at DDD. It is disturbing to think they have a potentially dangerous glitch with the site that puts your personal information at risk of unauthorized viewing or theft.
Laser Movies is offline  
Old 10-09-04, 01:33 AM
  #6  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
OK, I couldn't log on to my account while using Mozilla Firefox web browser, so I switched over to Internet Explorer.

On IE, other accounts did not come up automatically and I was able to log on to my own account and delete my credit card number.

Has everyone else that experienced this problem been using a browser other than IE?
rich-y is offline  
Old 10-09-04, 01:38 AM
  #7  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
Boy was I wrong! I just logged out of my account on IE and it automatically pulled up the account of "Chris". So I guess the type of web browser has nothing to do with it.

I have emailed DDD and tried to call to leave them a message, but that was not an option on their phone system.
rich-y is offline  
Old 10-09-04, 01:40 AM
  #8  
DVD Talk Hall of Fame
 
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like on 1 Post
I just went back to edit my credit card number and it won't let me change the number. Also the site will not let me log out now. I'm using an Avant browser which is using an IE shell.

Last edited by Laser Movies; 10-09-04 at 01:43 AM.
Laser Movies is offline  
Old 10-09-04, 01:44 AM
  #9  
Cool New Member
Thread Starter
 
Join Date: Oct 2004
Posts: 49
Likes: 0
Received 0 Likes on 0 Posts
Yeah -- I had to delete my cookies and shut down before I could log out.

Every time I tried, it redirected me back to some poor person's exposed account.
SuburbanCowboy is offline  
Old 10-09-04, 01:47 AM
  #10  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
Originally posted by LASERMOVIES
I just went back to edit my credit card number and it won't let me change the number. Also the site will not let me log out now. I'm using an Avant browser which is using an IE shell.
See if it will let you change the billing option to "Bill Me Later". That automatically deletes your cc number and actually worked for me.
rich-y is offline  
Old 10-09-04, 01:52 AM
  #11  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
DANGER! Deep Discount DVD website is not secure!!

Read this link ASAP! Thanks to SuburbanCowboy for spotting this huge problem that has hit DDD again!

http://www.dvdtalk.com/forum/showthr...14#post5399214

(and yes, I know this is not a bargain, but it is very important for all of us bargain hunters to protect our credit card info)
rich-y is offline  
Old 10-09-04, 01:54 AM
  #12  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
I have posted a link to this thread in other areas of DVDTalk since it is very important that readers see it ASAP!
rich-y is offline  
Old 10-09-04, 01:54 AM
  #13  
DVD Talk Hall of Fame
 
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like on 1 Post
Changing to "bill me later" worked. Only way I can log out is to delete cookies with Avant. I tried Mozilla and that seems to work fine.
Laser Movies is offline  
Old 10-09-04, 01:56 AM
  #14  
Cool New Member
Thread Starter
 
Join Date: Oct 2004
Posts: 49
Likes: 0
Received 0 Likes on 0 Posts
What happened last time this went down?

What was the explanation?

Did anyone have any cases of fraud perpetrated on their account?
SuburbanCowboy is offline  
Old 10-09-04, 01:59 AM
  #15  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
DANGER! Deep Discount DVD Website is Not Secure!

Read this link ASAP! Thanks to SuburbanCowboy for spotting this huge problem that has hit DDD again!

http://www.dvdtalk.com/forum/showthr...hreadid=389775

(and yes, I know this is not about a specific DVD, but this is very important for most of us who visit DVDTalk and must be acted upon ASAP!)

Last edited by rich-y; 10-09-04 at 02:26 AM.
rich-y is offline  
Old 10-09-04, 02:01 AM
  #16  
DVD Talk Hall of Fame
 
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like on 1 Post
I don't remember since it was several years ago when it happened. But I never had any theft from my account at DDD. Maybe a search could dig up one of the old threads.
Laser Movies is offline  
Old 10-09-04, 02:04 AM
  #17  
DVD Talk Legend
 
gcribbs's Avatar
 
Join Date: Aug 1999
Location: Sacramento,Ca,USA member #2634
Posts: 11,975
Received 2 Likes on 1 Post
I was able to change my account to bill me later also.

Their site is screwed up right now.
gcribbs is offline  
Old 10-09-04, 02:11 AM
  #18  
DVD Talk Legend
 
gcribbs's Avatar
 
Join Date: Aug 1999
Location: Sacramento,Ca,USA member #2634
Posts: 11,975
Received 2 Likes on 1 Post
Originally posted by LASERMOVIES
I don't remember since it was several years ago when it happened. But I never had any theft from my account at DDD. Maybe a search could dig up one of the old threads.
I had an account that I had to close awhile back(around 2 years ago) and I thought it could have been from DDD. I caught it early and since I never had another problem I let it slip my mind till now.
gcribbs is offline  
Old 10-09-04, 02:16 AM
  #19  
DVD Talk Godfather
 
Join Date: Jul 2000
Location: City of the lakers.. riots.. and drug dealing cops.. los(t) Angel(e)s. ca.
Posts: 54,199
Likes: 0
Received 1 Like on 1 Post
wait.. what?
Jackskeleton is offline  
Old 10-09-04, 02:20 AM
  #20  
Needs to contact an admin about multiple accounts
 
Join Date: Oct 2003
Posts: 449
Likes: 0
Received 0 Likes on 0 Posts
I noticed a bunch of movies in my shopping cart that I did not put there. Probably somebody who didn't notice they were jumping to other people's accounts. Watch your e-mails for confirmations of orders you never placed.
THX7966 is offline  
Old 10-09-04, 02:28 AM
  #21  
Senior Member
 
Join Date: Dec 2000
Posts: 929
Likes: 0
Received 25 Likes on 19 Posts
Originally posted by Jackskeleton
wait.. what?
Sorry... I've fixed the link now!
rich-y is offline  
Old 10-09-04, 02:43 AM
  #22  
DVD Talk Platinum Edition
 
Join Date: May 1999
Location: Pleasanton, Ca
Posts: 3,017
Likes: 0
Received 0 Likes on 0 Posts
Hi Guys,

For people having problems getting logged in to try to switch over to 'Bill Me later', try going to this link directly:

www.deepdiscountdvd.com/login.cfm

From there I was able to get into my account and make changes to my phone number and credit card that seemed to have 'stuck'.
hellmutt is offline  
Old 10-09-04, 02:44 AM
  #23  
DVD Talk Platinum Edition
 
Join Date: May 1999
Location: Pleasanton, Ca
Posts: 3,017
Likes: 0
Received 0 Likes on 0 Posts
I also posted this in the other thread, but if we're gonna keep two threads open then I wanted to put this here too:

Hi Guys,

For people having problems getting logged in to try to switch over to 'Bill Me later', try going to this link directly:

www.deepdiscountdvd.com/login.cfm

From there I was able to get into my account and make changes to my phone number and credit card that seemed to have 'stuck'
hellmutt is offline  
Old 10-09-04, 02:44 AM
  #24  
DVD Talk Ultimate Edition
 
onebyone's Avatar
 
Join Date: Nov 2002
Posts: 4,049
Likes: 0
Received 0 Likes on 0 Posts
This explained what happened earlier when I went there and unbeknowst to me ended up ordering all these movies I had never placed in my cart. I was looking to just buy Slacker. This is really quite bad.
onebyone is offline  
Old 10-09-04, 02:44 AM
  #25  
DVD Talk Hall of Fame
 
Join Date: Dec 1999
Location: Formerly known as (ahem) "LASERMOVIES"/California
Posts: 9,464
Likes: 0
Received 1 Like on 1 Post
Originally posted by gcribbs
I had an account that I had to close awhile back(around 2 years ago) and I thought it could have been from DDD. I caught it early and since I never had another problem I let it slip my mind till now.
I did get into some problems several years ago when DDD was using pop up windows to promote special offers for other companies. I accidently clicked one of the pop ups and ended up getting enrolled into a book club, and having my credit card charged. I thought that issue was very close to being theft.

I tried searching but couldn't come up with an old thread on this topic. But I do remember there were posts by some members claiming they could see other DDD accounts besides their own. Unfortunately the search function on the site doesn't work very well.
Laser Movies is offline  

Thread Tools
Search this Thread

Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.