Bulkreef supply hacked credit cards compromised

[3Twinklets]

Most folks should know about this now. Customers need to contact Bulk Reef Supply and their credit card companies. That is all that needs to be said.

 

[LILBUDDHA]

I got a letter in the mail today . I haven't ordered from them in a bit . It stated only name, address, phone number , email addy , user name and pswrd may have been compromised .
Yada Yada ..etc . I think a snail mail to me was a good thing they did for people with accts with them . If someone was a new shopper ,I would say that's a different story since that's what I think some others are concerned about .

 

[cginter]

This explains EVERYTHING! I was also a victim I believe.

 

[SCMatt]

Got my snail mail today. No activity on the CC as of yet.

 

[jdl513]

There is a problem with blanket e-mails I wanted to bring up and the likely reason BRS did not send out a blanket e-mail.

Often when there are hacks the hackers follow up with a phishing e-mail to the same e-mail list the company would use.
I would NOT click on any e-mail that showed up in my inbox from a company that is recovering from a security breach.
They know people are nervous and therefore maybe easy targets to steal even more information.

Instead take it offline using snail mail or the phone.

 

[CausticGuy]

My card was also stolen. Charges were made to an online gaming site for $170 before it was caught. Fifth Third helped me correct the issue but it was confusing the hell outta me cuz I never use the card I used on my last BRS transaction for much of anything.

 

[bneufelder]

To say security wasn't lacking is insane. That is exactly how people get hacked. My letter said they also have our passwords, so any site I also use that password on is now compromised. (This could be a hacker posting on my behalf as you read this!)

Really though, they hired a company to resolve the issue and waited weeks to tell us. That is bs. I had a pair of $1300 shoes purchased as well as burner cell phones.

 

[Fish76]

There is a problem with blanket e-mails I wanted to bring up and the likely reason BRS did not send out a blanket e-mail.

Often when there are hacks the hackers follow up with a phishing e-mail to the same e-mail list the company would use.
I would NOT click on any e-mail that showed up in my inbox from a company that is recovering from a security breach.
They know people are nervous and therefore maybe easy targets to steal even more information.

Instead take it offline using snail mail or the phone.

Ok then why not just post something on the website that everyone can see, not some ambiguous small link that hardly anybody will see. And if you didn't know about the hack, how would you know not to open the email? Not trying to battle here, just kinda think it's lame how they went about letting people know. I mean, obviously they weren't against posting it since they did so on their website, just made it really hard for customers to actually get that information.

 

[jdl513]

Ok then why not just post something on the website that everyone can see, not some ambiguous small link that hardly anybody will see. And if you didn't know about the hack, how would you know not to open the email? Not trying to battle here, just kinda think it's lame how they went about letting people know. I mean, obviously they weren't against posting it since they did so on their website, just made it really hard for customers to actually get that information.

I agree I think they should have the notice should be prominent on their site.
Just saying it seems that phishing after a security breach is a common tactic so be cautious.
If it was me I would not open any e-mail from them for a while without calling them to confirm it is legit first.

 

[CausticGuy]

PremiumAquatics sent out a coupon when their shopping cart went down for a day.

 

[NanaReefer]

 

[that Reef Guy]

Somebody told me as long as you did not save your Credit Card Info on the site you are fine.Wait?

I have bought multiple purchases from BRS but I never saved my CC info.

I always Manually Type it in every time I order something.

So am I safe or no?

 

[that Reef Guy]

I see that but in the mean time I feel it's a disservice that they are hiding that in the corner hidden. This has been going on for 6 months and now there just a little text everyone could miss easily and since it's already been over two weeks since they discovered this how long until the emails go out to people. I realize there trying to help customers they think we're effected but why not put it right on the front page in bold instead of hiding it behind a security update link. It seems more of a security problem than an update I'm sure even you would agree to that. I love brs but this is just not a good way to handle something like this in my opinion. I think it's only right that every reefer knows about this now because who knows if there information was compromised. Instead of waiting for brs to send an email or do the right thing and put it on the front page easy to see.

Honestly who would normally click that link there hiding it to save face. I'm glad there sending out emails but us reefers talk to each other quite often and on forums a full page ads would at least get the word out to watch your finances.

Why?

Because if they made it very obvious over the front page nobody would buy anything for fear that it would happen again.

If it happened to your company you would do the same thing.

It sucks but it happens all the time.

It is not their fault.

 

[that Reef Guy]

They sent out official letters in the mail. I received one today. Give them a break. Its happening to everyone online these days.

I know right.

This guy needs to calm down.

I think his goal is to put BRS out of business.

 

[that Reef Guy]

I was wondering why every month I was getting phone calls from MasterCard security enforming me that someone was trying to be airline tickets with my card it happened to me 3 times in a 2 month period and all I could do is narrow it down to a few businesses bulk reef supply was one of them but wasn't sure which business security was compromised and it's now nice to know thanks for posting this and I hope they get this issue resolved soon...

H

How exactly do you narrow it down.

It could be anywhere you make a purchase.

 

[that Reef Guy]

I'm sorry I feel a little different having been through this. Also this isn't the first time there's been problems with this before as another poster has already stated. Hard to have empathy for them reading things like that. Also most other companies that have had this problem have also put it on big bold easy to find print on the front of there companies main webpages.

For the record I support brs always have but I do not agree with there method of distributing this potential problem for people's financials and personal information. Seriously with the age of the Internet to send something by mail and too wait two weeks to inform people there may have been a hack is borderline ridiculous. Get the word out is what I'm saying put it on your homepage send all customers emails that made purchases during that period. I would have way more compassion and understanding for them if they handled it in this fashion but the way there going about it is trying to cover it up unless you may have been envolved. Just doesn't seem right I'm sorry

Yeah and those other Companies (Target, Home Depot, etc.) are huge huge companies that made National News.

If they were small like BRS they would be doing the same thing by trying to hide it in small print.

 

[that Reef Guy]

If you use the Internet to purchase goods, or any other digital method, you must do so with the assumption that there is potential for things such as this, stolen info, to occur. I received my letter today. I will take them up on the free monitoring service. But I must say, saw it here first!

You do not have to use the internet to have your identity stolen.

I have heard it time and time again.

If somebody wants your info they will get it.

Not buying on the internet isn't going to save you.

 

[ja4207]

First here's your sign, don't replicate passwords.

Second, nevermind, just go back to checkbooks and cash and I'll save my breath.

 

[UNCFAN]

I received a letter in the mail from BRS alerting me about the credit card breach. They set up a free one year credit monitoring service account at Experian. Did anyone else get that letter?

 

[Zacco]

The best thing you can do is call your bank or credit card supplier and tell them of the situation and have them cancel your card and issue you a new card (or cards). From now on I only call my orders in over the phone or use pre-paid cards. One thing that should be changed is for BRS or any business to NOT store your credit card numbers on your account page. Go to your account page and delete them.