TAD Gear Hacked

[bean]

Hey guys its important if you have ordered from TAD since august to read this. This was taken from soldier systems.
http://soldiersystems.net/2009/11/19/tad-gear-hacked/

I don’t think any company wants to have to tell their customers something like this but TAD Gear found out last night that their server had been hacked. They placed the following information on their Facebook page and are taking steps to fix things on their end. They recommend that anyone who purchased online from them between August 6, 2009 and November 16, 2009, cancel the card they used and take a hard look at any transactions.

“This notice is to inform our customers of a security incident at TAD Gear. We recently learned that our database was illegally accessed from an external source, and it appears that some customer data were taken, which may include customer names, contact information and credit card data. The possibility of a security breach came to our attention when certain customers notified us that unauthorized charges had appeared on their credit cards. Upon learning of the potential breach of security, TAD Gear immediately initiated an investigation, and took corrective steps based on the advice of an internet security firm. We have also contacted law enforcement.

If you purchased merchandise from TAD Gear on-line between August 6, 2009 and November 16, 2009, and the credit card used to purchase that merchandise is still valid, in order to protect yourself from the possibility of identity theft or misuse of your credit card information, we recommend that you immediately contact the issuer of that credit card and close your account. Tell them that your account may have been compromised. If you want to open a new account, ask your credit card issuer to give you a PIN or password, as this will help control access to the account.

In addition, we recommend that you place a fraud alert on your credit files. A fraud alert lets creditors know to contact you before opening new accounts. Just call any one of the three credit reporting agencies at a number below. This will let you automatically place fraud alerts with all of the agencies. You will then receive letters from all of them, with instructions on how to get a free copy of your credit report from each.

Experian Equifax TransUnion
888 397 3742
www.experian.com
866-640-2273
www.equifax.com
877-701-5276
www.transunion.com

When you receive your credit reports, look them over carefully. Look for accounts you did not open. Look for inquiries from creditors that you did not initiate. And look for personal information, such as your home address and Social Security number, which is not accurate. If you see anything you do not understand, call the credit reporting agency at the telephone number on the report.

If you do find suspicious activity on your credit reports, call your local police or sheriff’s office and file a police report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. Even if you do not find any signs of fraud on your reports, we recommend that you check your credit report every three months for the next year. Just call one of the numbers above to order your reports and keep the fraud alert in place.

For more information on identity theft, we suggest that you visit the web site of the California Office of Privacy Protection at www.privacy.ca.gov, or the Federal Trade Commission at www.ftc.gov/bcp/edu/microsites/idtheft. If there is anything TAD Gear can do to assist you, please email us at action@tadgear.com, a special email address that we have set up to help answer your questions.”

[Dart]

my question is why are they storing credit card info on a server? Is this normal practice for most E-tailers?

[T_A_N_K]

They are not an E-tailer they have a physical store. Information of Customer and method of payment IE Credit Card are obviously going to be on their servers.

[Mist3r.B]

Guest that's why I had to change my credit card. Some strange transactions started happening a few day's after I placed my order with them.

None the less they make good stuff

[T_A_N_K]

I placed and order, but I cancelled it while it was in process. Not taking any chances... Very inconvenient as I only have 1 credit card.

[T_A_N_K]

BTW, thanks for the heads up bean, im surprised I found out this information from an AS Forum and not be TAD Gear themselves....

[bean]

There site has a note on it too its just not huge and glaring.

[L473ncy]

At least they were honest about it and didn't try to cover it up. The worst thing they could do is try to cover it up. This shows they really care about their customers.

[Chingyul]

I got an email from TAD today, so they are sending out notice.
Glad I ordered with Pay Pal this time.

[infernal]

its just one thing after another with this group of clowns.

[T_A_N_K]

Originally Posted by Chingyul

I got an email from TAD today, so they are sending out notice.
Glad I ordered with Pay Pal this time.

Got mine too, I already checked and cancelled my credit card.

[Pivot]

Efiing TAD. I ordered two patches, and now I have to cancel my CC...

[T_A_N_K]

Just an update, got a letter in the mail stating the above as well. Looks like they are on the ball with this one.

[pugs144]

Yeah, an email 5 days after the fact.

[bean]

Unfortunately identity theft happens all the time and there isn't a whole lot you can do in most cases. I had it happen getting something at Walmart once. They sure as hell didn't message me so at least TAD is doing something.