Live data from Hacker News

Credit cards used on cvsphoto.com may have been compromised

cvsphoto.com

41–50 of 61 posts

Re: Credit cards used on cvsphoto.com may have been compromised

#41

Was access to stored photos also compromised? The linked message from CVS doesn't say one way or the other.

From the page: "We apologize for the inconvenience and are working diligently to resume service as soon as possible. Your images are saved and you will have access to them once service to CVSPhoto.com is restored." That being said, my understanding as somebody with 15 years of working history in the online photo space is that PNI is the host and all of their major customers shut off so I can't imagine that PNI is ver…

Saying the images are 'saved' is not the same thing as saying that they were not improperly accessed. That's what I'm wondering about (I phrased my initial comment poorly).

Re: Credit cards used on cvsphoto.com may have been compromised

#42
post #27

Earlier quoted context omitted.

You shouldn't be worried now. You don't pay for any fraudulent charges.

It's still a major hassle when our cards get compromised and subsequently canceled by the bank. I've had it happen when I'm traveling, and my primary card suddenly stops working. I always carry backups for this reason, but it's still disruptive and potentially embarrassing. Also if I have a card on file for recurring payments or repeat orders, I have to go find all of those places and update it every time the card ge…

> I finally took to having a single card that is used for ONLY recurring payments...

This is a sound plan. Kudos!

For non-recurring payments, I've taken this a step further: I use a debit card for online purchases backed by an account with just a few dollars in it. When I wish to make a purchase, I move the funds for that purchase into that account.

I would rather have a fraudulent purchase be declined than to deal with the hassle -however small- of disputing a charge.

Re: Credit cards used on cvsphoto.com may have been compromised

#43
post #37

My credit card was ripped off 4 times in the last year. Recently, I had a credit card for less than a week. Since then, I started to use Virtual numbers. It's a feature that generates a virtual credit card number that I am opting to use per vendor. Hopefully, this will expose the vendors that are leaking this sensitive information.

Good idea. Which bank or credit card are you getting this service through?

Re: Credit cards used on cvsphoto.com may have been compromised

#44
post #27
post #25

Credit card security is a joke. I shouldn't have to worry every time I give my credit card information to a website that they may leak it due to whatever reason. The information that I give out should be considered public information. They should require to always authenticate myself with the physical card (which is a smart card by the way). What's the point of the card otherwise? It's not like I want to cover up for…

You shouldn't be worried now. You don't pay for any fraudulent charges.

You indirectly pay for all fraudulent charges because they're included in the fees the merchants pay to the credit card companies (and obviously just include in their pricing as well). With a secure system those fees could be much lower.

Re: Credit cards used on cvsphoto.com may have been compromised

#45

Earlier quoted context omitted.

Hate when they say "We take security of our members' data seriously". How do I know the hack was due to their incompetence? PR people need to come up with a better approach.

Hate on "We take security of your data" is a new hype, but grandparent and OP actually contained blame shift: > security compromise of the third party vendor > collected by the independent vendor may have been compromised This is the case of "sorry for my friends, I'm doing the best I can", which is entirely different situation than "I accidentally slept with your best friend, but I value our relationship" kind of PR…

If they "took security seriously" they would work with vendors who take security seriously. Wonder if they'll drop these guys as vendors now that they are proven to not take security seriously...

Re: Credit cards used on cvsphoto.com may have been compromised

#46
post #27

Earlier quoted context omitted.

You shouldn't be worried now. You don't pay for any fraudulent charges.

It's still a major hassle when our cards get compromised and subsequently canceled by the bank. I've had it happen when I'm traveling, and my primary card suddenly stops working. I always carry backups for this reason, but it's still disruptive and potentially embarrassing. Also if I have a card on file for recurring payments or repeat orders, I have to go find all of those places and update it every time the card ge…

If you're in the US: We're working on solving this at getFinal.com. Email us and we'll make sure you get taken care of as soon as we can.

Re: Credit cards used on cvsphoto.com may have been compromised

#47
post #11
post #6

Earlier quoted context omitted.

Thank you, this is a very valuable and useful comment.

My sarcasm detector is admittedly permanently broken thanks to years on IRC and forums, but just in case: It's useful because the steps a reader would need to take before being secure clicking through to a site identified in the submission title as "hacked" (I notice the title has been clarified since then) are non-trivial. I figured since I'd done them once, I might as well save additional folks the steps if they we…

It's useful because this situation is temporary. Once the site is back online, the explanation will no longer be posted and anyone coming across this post in a week, month, or years later will have no information.

Re: Credit cards used on cvsphoto.com may have been compromised

#49
post #37

My credit card was ripped off 4 times in the last year. Recently, I had a credit card for less than a week. Since then, I started to use Virtual numbers. It's a feature that generates a virtual credit card number that I am opting to use per vendor. Hopefully, this will expose the vendors that are leaking this sensitive information.

Good idea. Which bank or credit card are you getting this service through?

Bank of America has this feature (I'm sure others do also).

Re: Credit cards used on cvsphoto.com may have been compromised

#50
post #37

My credit card was ripped off 4 times in the last year. Recently, I had a credit card for less than a week. Since then, I started to use Virtual numbers. It's a feature that generates a virtual credit card number that I am opting to use per vendor. Hopefully, this will expose the vendors that are leaking this sensitive information.

We're building exactly this product for exactly this reason at Final. Email me and I'll make sure that you're an initial user.
Post reply on HN