Anyone having trouble with checkout security at GlobalSugarArt? - Page 5  

I am pretty sure if Alan is redoing his website and credit card information, it is probably a random number generator, which is encrypted.   These are a lot harder to break into.  You really can't blame him for dirt-bags that broke into his website.   Yes, you can blame him for not notifying everyone a little quicker.  Setting up new websites isn't super quick, either.  Before you let thieves ruin a business, let him try to get his new system running.   With an updated secure website system, your information should be secure. 

I also have no affiliation with GSA.  I have been there one time while visiting my in laws.  They are very nice. 

It is unfortunate that GSA was hacked (especially with a time-delayed attack) but as soon as you realize that all credit card numbers submitted through your online checkout system will be compromised, you need to immediately take the checkout system offline and rely on phone-in orders only until the issue has been resolved. Full stop.

Thank you very much Alan for addressing this forum. I am confident that you are taking measures to resolve this problem and I agree that even banks get hacked and we are all exposed to this type of corruption.

GSA is a great company that offers good products at competitive prices and I am happy to know that it is expanding. I sincerely hope that the new website platform will be 100% secure and we will be able to leave this bitter experience behind us. Good luck!

While I'm glad steps have been made to make the site secure again, I agree with others that it was not handled appropriately. 

 

Having a breach in security is regrettable, but understandable. But the company obviously knew this was an issue and continued to accept online payments. That is not acceptable and shows poor judgement and awful customer service. There is no guarantee that a site can't ever be hacked, but there should be a guarantee that the site owner will take the necessary steps to protect their customers.

 

This has been an issue for months which, in my opinion, no longer makes it a case of thieves ruining the business - it's a case of a business owner knowingly putting their customers at risk everytime they accept an online payment.

 

Ok, so the new system is secure. For how long? What happens if things go wrong again? Will the site continue accepting payments and not notify customers? 

 

Fool me once, shame on you....fool me twice, shame on me.

 

Sorry, but I'll take my business elsewhere. 

As I was following this thread, I kept wondering how concerned I needed to be since I am a GSA customer.  It sure didn’t take long for me to find out, because I got a call from my cc company about fraudulent charges tonight.  Kudos to my cc company for their vigilance when it comes to fraudulent charges, but two thumbs down for GSA failing to notify their customers ASAP when they knew the safety of their server had been compromised.  That is not acceptable.

was this breach before or after GSA owner AlanT stated website security had been fixed (ref post #59 of this thread)???

 

would really like to know since GSA's login/registration pages are still unsecure (http vs https)...

If the server itself is compromised the page is not safe even if it is https, since the secure http protocol is only meant to protect data while in transit between your computer and the server.

Me too!  Three separate times!  I really love their range of products, but my goodness, I can't constantly get new cards.  :(

 

I will look into the disposable credit card number.  Very cool!

Holy Cow!! I am so glad that I saw this thread! A month or so ago, I purchased some fondant cutters from GSA, using my debit card linked to my checking account. Imagine my surprise when a week or so after that, I tried to use my debit card for a very small purchase locally and it was declined. I called my bank, who informed me that they had deactivated my card because of suspicious transactions on my account from the day before. Apparently someone in Australia and someone in Spain, at the same time, were trying to make purchases using my card number. My bank refused the purchases, my money is safe, but they immediately flagged the account and closed my card. I was thankful for my bank recognizing this situation. The only other purchase I had made recently, using that card, was from GSA and I wondered if that may have been the problem. I'm glad GSA is getting the problem fixed as best as they can because I do like their offerings and want to make purchases from them in the future.

 

Are you stating the TiGER-M@TE hack was/is more than just a prank "defacement" of multiple websites...that this hack was/is actually a "time-bomb" style breach?

Wow my cc was compromised too. I purchased twice from GSA in the last two months. Now I know how they got my info.  I had almost $500 charged on my cc this month.  GSA could of sent out an email to their customers stating that there was a security issue.  BUT they can send out emails stating a product is back in stock!  SHAME!

virago, the fraudulent charges appear on my cc prior to post #59 by Alan T.  Even if the site is secure now, all the cc account numbers that have been stolen are still out there.  As much as I appreciate the sincerity behind Alan T’s apology, I feel it is too little, too late.  I believe GSA left their customers vulnerable to fraud for months without any warnings, to protect their own financial standing.  Although I have always enjoyed dealing with GSA in the past, I find their lack of business ethics in this particular situation inexcusable.  Therefore, as others have stated, I will no longer patronize GSA with any future purchases. 

Yikes, I ordered from them on Monday and I called my bank today to cancel my bank card.  I'm not taking any chances!  They do have great products, but their shipping is extremely high - and I only live 5 hours away.

My card was first compromised back in June and it happened two more times since then so that's how long I'm aware it's been going on. I had to start ordering elsewhere because I belong to a small bank so if I don't have a ATM/Debit card and I need access to my money when the bank is closed. I'm SOL.