By way of background, I ordered 6 "What Would Walt Do" pins in preparation for our upcoming trip to WDW. We always like to recognize cast members for their special efforts. As we all know, they sure don't get paid very much, so honoring them with one of these pins and of course writing a letter to WDW management praising them is the least we can do!
Unfortunately, I ordered the pins on August 7th and used my credit card. So, the hackers most certainly have my credit card information. I know they have my email address because I got this email from them on August 29th:
"Hello this is just a heads up to all of 'What Would Walt Do' customers. We=
have owned your all of your information and may or may not be stealing you=
r identities. Thank you.<br><br>OWNED BY HAMMER @ BARARCADE.COM"
I immediately forwarded the information to the FBI and the FTC and to the webmaster at "What Would Walt Do". Within an hour, I got this message back from the webmaster:
"Three of our guests have written tonight saying that they have received an e-mail from WhatWouldWaltDo.com saying that our security had been breeched and all personal information (with credit cards) has been lost.
This e-mail did not come from us. We believe it is "spoofed" or faked by someone forging our e-mail address. It is not that unusual a practice, unfortunately. We have had it happen a couple of times earlier, but each time our security consultants have indicated that no breech had occurred, as a result of tonight's e-mails I have requested another review.
First of all, we do not keep any credit card information at WhatWouldWaltDo. Although it is invisible, when you enter your credit card information, you are in a protected, secure tunnel and actually logged into our bank's website. The only information we get back on the transaction is the approval code. Therefore, there is nothing for anyone to steal.
Second, reading the copies of these e-mails made my heart stop, just as it probably did you. It's something none of us wishes to happen, so we are very careful and change our administrative passwords frequently.
Finally, I am in the final stages of formatting the nominations, and look forward to uploading a single batch of 118 nominations, which will mean that all orders and nominations will be current.
Please let me know if there is any remaining question I can answer.
Enjoy the Magic!
Tom"
So, that's how it stands now. Both the FBI and FTC contacted me with instructions on how to help catch these hackers but I can't give you any details about that aspect right now. Just wanted you all to be aware that hackers can and will strike anywhere. Even a Disney related site!
I will keep you posted on the outcome.