Just a warning to people to stay away from buying anything from the rare spares online store at the moment.
I made a purchase last week through their website and the next day someone made a purchase for $810 at WOW.
I reported it to the bank and have just received confirmation from Rare Spares that it is someone hacking their website and they are currently trying to sort it out.
Rare spares online - beware
Started by
_waz355_
, Mar 30 2009 03:29 PM
25 replies to this topic
#2
_homer_
_homer_
-
- Guests
Posted 30 March 2009 - 03:59 PM
Yep, I got caught to. I got an email from rare spares saying their site had been hacked into. This is what they said.
30th of March 2009
Att: Rare Spares Customer
On-Line Store Managers
Subject: Credit Card Fraud
Dear Sir/Madam,
It is with regret that I must inform you that Rare Spares has been the victim of an elaborate international hacking campaign targeted at the Rare Spares on-line shop. As a result of this attack your personal credit card details may have been compromised. All internet orders placed or outstanding between the 23rd of February and the 25th of March have been identified as being potentially compromised. Your order has been determined to fall within this date span and as such this letter is of particular importance to you.
The nature of the attacks involved circumventing security measures that had been put in place, employing anti logging techniques to mask the method of attack and injecting complex commands into one of our web pages. The result of this attack allowed the perpetrator/s to view the credit card details of a given order, on an order by order basis, while maintaining an element of stealth. To date we have 12 confirmed cases of customer credit card details being stolen and used for fraudulent transactions. We suspect there may be more forthcoming.
The eCrimes Squad of the Victorian Police have been notified of the crime and log files detailing the method and source of attacks have been supplied. The police will be in contact with your bank to notify them of the breach in security where your bank maybe in contact with you in regards to the action they need to take. Those that have already been confirmed as having fraudulent transactions carried out on their credit card account maybe contacted by the police directly in the coming weeks. Naturally we are doing everything in our power to bring the perpetrator/s to account, and believe we have supplied sufficient evidence to all parties involved to hopefully bring about a positive result out of this bad situation.
Although we have removed the ability to be exploited further, we ask you to pay particular attention to your credit card statements and look for possible fraudulent transactions. Any suspect transactions should be relayed to your bank as soon as possible. Additionally if the details of such transactions can be forwarded to me, I will in turn forward these details to the eCrimes Squad for further investigation.
On behalf of Rare Spares I would like to extend our sincere apologies for any inconvenience caused. In speaking directly with a number of you it is very clear the problems that this attack has caused, and from our perspective it has been particularly damaging as well. I would also like to assure you that we have implemented safeguards to prevent these or similar attacks ever happening again.
Please, if you have any questions or require additional information feel free to contact me directly or one of my colleagues using the details below. Though I would ask if you do feel it appropriate to contact us, please have constructive intent and understand that we are a victim in this as well, and are trying to do the right thing by everyone involved.
Yours Sincerely,
______________________________________________
David A Ryan
Associate Director & IT Manager
RSP AUTOMOTIVE & INDUSTRIAL PTY LTD
(Incorporating Rare Spares)
20-22 Truck City Drive, Campbellfield, Vic 3061, Australia
PHONE: +61 3 9305 4000FAX: +61 3 9305 3520
EMAIL: [email protected]
www.rsp.net.au
30th of March 2009
Att: Rare Spares Customer
On-Line Store Managers
Subject: Credit Card Fraud
Dear Sir/Madam,
It is with regret that I must inform you that Rare Spares has been the victim of an elaborate international hacking campaign targeted at the Rare Spares on-line shop. As a result of this attack your personal credit card details may have been compromised. All internet orders placed or outstanding between the 23rd of February and the 25th of March have been identified as being potentially compromised. Your order has been determined to fall within this date span and as such this letter is of particular importance to you.
The nature of the attacks involved circumventing security measures that had been put in place, employing anti logging techniques to mask the method of attack and injecting complex commands into one of our web pages. The result of this attack allowed the perpetrator/s to view the credit card details of a given order, on an order by order basis, while maintaining an element of stealth. To date we have 12 confirmed cases of customer credit card details being stolen and used for fraudulent transactions. We suspect there may be more forthcoming.
The eCrimes Squad of the Victorian Police have been notified of the crime and log files detailing the method and source of attacks have been supplied. The police will be in contact with your bank to notify them of the breach in security where your bank maybe in contact with you in regards to the action they need to take. Those that have already been confirmed as having fraudulent transactions carried out on their credit card account maybe contacted by the police directly in the coming weeks. Naturally we are doing everything in our power to bring the perpetrator/s to account, and believe we have supplied sufficient evidence to all parties involved to hopefully bring about a positive result out of this bad situation.
Although we have removed the ability to be exploited further, we ask you to pay particular attention to your credit card statements and look for possible fraudulent transactions. Any suspect transactions should be relayed to your bank as soon as possible. Additionally if the details of such transactions can be forwarded to me, I will in turn forward these details to the eCrimes Squad for further investigation.
On behalf of Rare Spares I would like to extend our sincere apologies for any inconvenience caused. In speaking directly with a number of you it is very clear the problems that this attack has caused, and from our perspective it has been particularly damaging as well. I would also like to assure you that we have implemented safeguards to prevent these or similar attacks ever happening again.
Please, if you have any questions or require additional information feel free to contact me directly or one of my colleagues using the details below. Though I would ask if you do feel it appropriate to contact us, please have constructive intent and understand that we are a victim in this as well, and are trying to do the right thing by everyone involved.
Yours Sincerely,
______________________________________________
David A Ryan
Associate Director & IT Manager
RSP AUTOMOTIVE & INDUSTRIAL PTY LTD
(Incorporating Rare Spares)
20-22 Truck City Drive, Campbellfield, Vic 3061, Australia
PHONE: +61 3 9305 4000FAX: +61 3 9305 3520
EMAIL: [email protected]
www.rsp.net.au
#3
_torana_
_torana_
-
- Guests
Posted 30 March 2009 - 04:02 PM
i got the same (majorly pissed off, and checking accounts at the moment)
#4
_Barman_
_Barman_
-
- Guests
Posted 30 March 2009 - 04:37 PM
Just bought some stuff this morning with credit card,
i hope its sorted out, ill be watching my card very closly.
Baz
i hope its sorted out, ill be watching my card very closly.
Baz
#5
_memorylane-spare-parts_
_memorylane-spare-parts_
-
- Guests
Posted 30 March 2009 - 05:04 PM
I have account with them you can buy of me. Just let me know what you need see what can do for you
#6
_OtG_
_OtG_
-
- Guests
Posted 30 March 2009 - 06:17 PM
I have account with them you can buy of me. Just let me know what you need see what can do for you
Hold on a second, nobody is saying not to buy off Rare Spares, just to be aware that there has been a problem.
Don't think you're doing yourself any favours by trying to take advantage of someone else's misfortune, especially when they're a supplier of yours. I'd suggest you stay well out of it.
And for the record, nobody need lose any money over this, the banks should refund the money to anybody affected. It might cause some frustration and some inconvenience but it's not the end of the world. I'm sure Rares will learn from it.
Edited by OtG, 30 March 2009 - 06:19 PM.
#7
ReplicarSLR
-
- Members
-
- 518 posts
Forum Fixture
- Location:QLD
- Car:Not anymore unfortunately
- Joined: 31-May 07
Posted 30 March 2009 - 06:17 PM
I got the same email from Rare's today. I noticed $4000 odd dollars worth of charges to my credit card two weeks ago and reported it to the bank. Easily noticed as I don't use my card very much. The last legitiment transaction I made was with Rares and it had me wondering where the buggers got my card details from, now I know. Just waiting for the bank to sort out my claim and the refund of the charges, fingers crossed.
#8
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 30 March 2009 - 06:25 PM
Wow... Ok.. Thanks for the warning!
It looks like Rare Spares has been made aware of the problem and has taken steps to rectify this.
I am personally dissapointed that scum of the earth such as these hackers target hard working people like our members and the companies we trust and rely on.
I'm sure the team at Rare Spares will take every step possible to ensure that this does not happen again ( as stated in the letter posted above) , and that their systems are safe for use in the future.
Thanks for bringing it to our attention.
It looks like Rare Spares has been made aware of the problem and has taken steps to rectify this.
I am personally dissapointed that scum of the earth such as these hackers target hard working people like our members and the companies we trust and rely on.
I'm sure the team at Rare Spares will take every step possible to ensure that this does not happen again ( as stated in the letter posted above) , and that their systems are safe for use in the future.
Thanks for bringing it to our attention.
#9
_memorylane-spare-parts_
_memorylane-spare-parts_
-
- Guests
Posted 30 March 2009 - 07:02 PM
Hold on a second, nobody is saying not to buy off Rare Spares, just to be aware that there has been a problem.
Don't think you're doing yourself any favours by trying to take advantage of someone else's misfortune, especially when they're a supplier of yours. I'd suggest you stay well out of it.
And for the record, nobody need lose any money over this, the banks should refund the money to anybody affected. It might cause some frustration and some inconvenience but it's not the end of the world. I'm sure Rares will learn from it.
that's not what i am saying mate rare spare's a problem with there online buying what i'm saying you can buy off by through me on my account i sell there goods now do you understand. OtG Thank You
Edited by memorylane-spare-parts, 30 March 2009 - 07:03 PM.
#10
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 30 March 2009 - 07:24 PM
Ok Thanks Guys, I dont want to turn this into a slanging match.
I'm sure Memory Lane Spare Parts had the right intentions in mind, but as has been said Rare Spare is an extremely honourable company and as can be seen by their letter, they are doing everything in their power to make right what these scum hackers have created.
I'm sure that The team at Rares are already and continuing to solve the problem and work to the best solution for all it's valued customers (Christ.. i should work for their PR department!!).
And once again, Rare Spares IS a valued and appreciated member and moreover sponsor of this forum and as such I hope that this problem is rectified speedily and to everyone's benefit.
I'm sure Memory Lane Spare Parts had the right intentions in mind, but as has been said Rare Spare is an extremely honourable company and as can be seen by their letter, they are doing everything in their power to make right what these scum hackers have created.
I'm sure that The team at Rares are already and continuing to solve the problem and work to the best solution for all it's valued customers (Christ.. i should work for their PR department!!).
And once again, Rare Spares IS a valued and appreciated member and moreover sponsor of this forum and as such I hope that this problem is rectified speedily and to everyone's benefit.
#11
_urkss_
_urkss_
-
- Guests
Posted 30 March 2009 - 07:34 PM
these hackers dont care, who they rip off. l used my wifes card last year, to donate to the heart foundation, get a call from the bank 2 days later, $1200 ripped off my wifes card at 2.05am in the morning, from somewere in sydney. these pricks dont care who they rip off, urkss
#12
_Skapinad_
_Skapinad_
-
- Guests
Posted 30 March 2009 - 07:36 PM
funny you mention charities. The guide dogs keep my card details on record which I am sure is illegal and just ring me each month asking if i want the same number of tickets as last time... its only $10 and never been a problem,but still strange they can keep the records ?
#13
_memorylane-spare-parts_
_memorylane-spare-parts_
-
- Guests
Posted 30 March 2009 - 07:42 PM
same email i received, goods arrived today, bank rang to say they are cancelling my card, but no fraudulent charges as yet thank god. Good on Rares, their letter was in my opinion sincere and obviously they took the steps to advise the banks of all transactions in the period. Well Done, even though I hate new credit cards as I only just memorised my last numbers !!!
I am a reseller i buy from about 20 other wholesalers sorry about my websit it getting close say 2weeks away i sell rare spare at there RRP
Thank You tiny
#14
enderwigginau
-
- Moderators
-
- 2,000,527 posts
Admin Wrangler
- Name:Grant
- Location:Parramatta
- Car:76 LX Sedan, 4 seater
- Joined: 04-February 07
Posted 30 March 2009 - 07:43 PM
that's not what i am saying mate rare spare's a problem with there online buying what i'm saying you can buy off by through me on my account i sell there goods now do you understand. OtG Thank You
The main point is that every sale through the online store here contributes money to the forum.
The forum would appreciate if anyone planning on purchasing from Rares waits til the issue is sorted and then buys from the online store to help support this, your forum.
I hope anyone who has been affected gets a good resolution.
Grant..
#15
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 30 March 2009 - 07:55 PM
Skapinad:
It's actually ILLEGAL for any entity to retain credit card records!
I purchased some clothing from america and the reciept even had the CC number physically cut out and removed to comply with this law.
As Enderwigginau and I mentioned above Rare Spares is a greatly appreciated financial supporter of THESE FORUMS and they have done their best to help us and our members out in the past, And we will do what we can to help them in return.
I'm sure this IT problem will be rectified very quickly and again i hope that everyone affected, Especially those who purchased their products from RS are fully reimbursed and that Rare Spares is not hampered by this unfortunate crime against them.
CHeers
It's actually ILLEGAL for any entity to retain credit card records!
I purchased some clothing from america and the reciept even had the CC number physically cut out and removed to comply with this law.
As Enderwigginau and I mentioned above Rare Spares is a greatly appreciated financial supporter of THESE FORUMS and they have done their best to help us and our members out in the past, And we will do what we can to help them in return.
I'm sure this IT problem will be rectified very quickly and again i hope that everyone affected, Especially those who purchased their products from RS are fully reimbursed and that Rare Spares is not hampered by this unfortunate crime against them.
CHeers
#16
_Skapinad_
_Skapinad_
-
- Guests
Posted 30 March 2009 - 08:47 PM
no worries tiny I thought as much... and in regard to Rares I think I said basically the same in my first response regarding their service. Les is always happy to respond to queries and seems reasonably active on the forum... I will happily buy from them again in the future...though maybe I will get off my lazy a*se and go in to the shop and pay with cash..
Memory lane... your resell at RRP so you are still making a profit if you get a trade discount allowing you to make some on top, certainly not as helpful as you seem ... either way I reckon your wasting your time, particularly on this site.
Memory lane... your resell at RRP so you are still making a profit if you get a trade discount allowing you to make some on top, certainly not as helpful as you seem ... either way I reckon your wasting your time, particularly on this site.
Edited by Skapinad, 30 March 2009 - 08:48 PM.
#17
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 30 March 2009 - 09:12 PM
Alright thanks guys.
We can see that Memorylane spares was trying to do the right thing by us while rare spares is suffering the difficulties it is suffering.
Let's leave it be and lets just hope that Rares get back on their feet quickly.
We can see that Memorylane spares was trying to do the right thing by us while rare spares is suffering the difficulties it is suffering.
Let's leave it be and lets just hope that Rares get back on their feet quickly.
#18
ToRunYa
-
- Members
-
- 2,073 posts
No Longer A Contributing Ninja/Member.
- Name:Em
- Location:Bumf*ck Idaho
- Joined: 08-November 05
Posted 30 March 2009 - 09:13 PM
oh damn! i was about the get the clublock! *walks off all disappointed*
#19
_slydog71_
_slydog71_
-
- Guests
Posted 30 March 2009 - 09:14 PM
This has turned to sh@t lock thread . thanks for the original post . Rare Spares do a great job nobody is perfect, make a system hacker proof and the hacker becomes more determined.No system will ever be 100% safe ever.
#20
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 30 March 2009 - 09:37 PM
This thread has been pruned back to stay on the original topic.
Please keep to the original topic or this thread will be closed.
Please keep to the original topic or this thread will be closed.
#21
_darrenmark1_
_darrenmark1_
-
- Guests
Posted 30 March 2009 - 09:44 PM
My advice from someone who got 10 grand taken from them a couple of years ago is if you have used the online store in the dates in question cancel your card! it only takes 3 or so days to get another one. It will be well worth it in the end. Just sitting around waiting for the money to go is not good. If they get your card number they can buy anything all over the world. Or sell the numbers to anyone for use. Darren
#22
_Pallbag_
_Pallbag_
-
- Guests
#23
_waz355_
_waz355_
-
- Guests
Posted 30 March 2009 - 10:33 PM
Thread was started just to notify others of the online problem so they don't go through the same inconvenience. I will get my money back and so will everyone else , may take up to 60 days apparently. Nothing against rare spares!
#24
_les_
_les_
-
- Guests
Posted 31 March 2009 - 06:12 PM
I was only made aware of the extent of problem this morning that�s what happens when you take holidays, I cannot add to what David Ryan said except to apologize to all those affected . I have a credit card with a limit of $500.00 that I use on the internet, in theory any larger amounts should not be processed by the bank.
Les
Les
#25
Tiny
-
- Administrators
-
- 10,018 posts
Oh My, Don't you post alot
- Name:Tiny
- Location:Sydney
- Joined: 04-February 07
Posted 31 March 2009 - 07:06 PM
What a time to take a break Les!
As all of the members here have said, We hope that Rares can recover quickly and fully and get past this major Pain in the ass situation!
As all of the members here have said, We hope that Rares can recover quickly and fully and get past this major Pain in the ass situation!
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
