Identity Fraud Alert

Status
Not open for further replies.
Jan 22, 2008
7
Catalina Catalina 320 1037 Kent Island MD
Just received an alert that my identify information may have been caught in a data breach from hunterowners.com and just letting everyone know to check their information. I don’t even own a Hunter but do own a Catalina so assuming that sailboatowners.com may have been breached.
 

Phil Herring

Alien
Mar 25, 1997
4,923
- - Bainbridge Island
I posted the result of our investigation here and locked this thread. If you have any questions or concerns about the situation please contact us through customer service or by phone at 877-932-7245 (M-F 9am to 4pm Pacific time). Thank you for your patience and understanding.
 
May 17, 2004
5,685
Beneteau Oceanis 37 Havre de Grace
Who's the alert from? Sometimes spammers send alerts like that to try to get you to click on a link and reveal your password. Sometimes legitimate security protection sites trigger if you use the same password across multiple sites. Also maybe @Phil Herring could let us know if anything happened?
 
Jun 10, 2017
174
Catalina 1980 Catalina 30 Mk II John's Pass / Tampa Bay
D & M,

You may be correct, just yesterday, 3 SBO emails could NOT be deleted which
is very strange. I did a Malwarebytes full scan then a Defender scan.
I was then able to delete the SBO emails. Both programs found PUP files & deleted them.

PUP stands for:
A Potentially Unwanted Program, also called in short as PUP, is a software that contains adware, malware, installs toolbars or has other unclear objectives. The term “Potentially Unwanted Program” was given by McAfee to avoid labeling downloadable programs as malware.

My bank was hacked in January & they hit 2 of my accounts. They were able to XFER $5,000.00.
Luckily, I have all bank transaction alerts sent to me & caught it quickly. It was 3 weeks of hell
having to change accts., usernames, passwords etc. During this nightmare, I discovered
that Soc. Security had also been hacked. Be sure to setup instant banking alerts.

Corporations will never come out & publicize they had been hacked most of the time.
Maybe a few down the road months later might publicize the hack.
Be very careful, as anyone can find access to your info. Never give out your card number over the phone,
or internet & NEVER the 3 digit code or give out your SS number. Very few companies need your SS#.

I purchase items over the internet but only use PayPal. Tis better to have 2 virus programs running &
always keep the definitions updated. Change settings in your browser to keep your location secret, only
allow session cookies from legitimate sites, NEVER open emails you do not know & run scans 2 times a week & when you notice something weird going on.

You are your first line of defense & your best virus program.
 
  • Like
Likes: Will Gilmore
Sep 30, 2013
3,595
1988 Catalina 22 North Florida
Who's the alert from? Sometimes spammers send alerts like that to try to get you to click on a link and reveal your password. Sometimes legitimate security protection sites trigger if you use the same password across multiple sites. Also maybe @Phil Herring could let us know if anything happened?
I got one from Lifelock. It was legit.
 

JamesG161

SBO Weather and Forecasting Forum Jim & John
Feb 14, 2014
7,770
Hunter 430 Waveland, MS
I just checked my eMail.
Most of mine were from Sailboatowners.com as alerts to a thread.

I did have one from HunterOwners.com, which I deleted and didn't open, but that in general is a Site wide "tease" that I don't use. I get the same buy starting at the Home page first.
Jim...
 
Apr 25, 2013
86
Oday 28 Toledo Beach
I got one from LifeLock also, I can't find where I change my password, anyone know how to find that on this site lol?
 
May 17, 2004
5,685
Beneteau Oceanis 37 Havre de Grace
I got one from LifeLock also, I can't find where I change my password, anyone know how to find that on this site lol?
Click your account name at the top of the screen. In the menu should then be a Password option. Looking at it on my phone so it might look a little different on the desktop, but it is there.
 
Apr 25, 2013
86
Oday 28 Toledo Beach
Thank you , DavidSailor26 I got it changed, I'm sure that when you sign up for one forum that your email goes to all of these associated, anyway thank you!
 
  • Like
Likes: Will Gilmore
Jun 10, 2017
174
Catalina 1980 Catalina 30 Mk II John's Pass / Tampa Bay
Oh & by the way,

I forgot to mention, that Credit Bureaus in January were also hacked!
HELL, you might have thought it was an ELECTION!#$%^&^&*
 
  • Like
Likes: justsomeguy

Phil Herring

Alien
Mar 25, 1997
4,923
- - Bainbridge Island
Hi guys, we're looking into this now. We've received no alerts or warnings of any kind and my email address does not show any alerts on Lifelock.

Can someone PM me the full text of the message you received?

Also, a quick reminder that we do not save _any_ credit card information and all passwords are encrypted on the server.
 
  • Like
Likes: JamesG161

Phil Herring

Alien
Mar 25, 1997
4,923
- - Bainbridge Island
We have our systems administrator checking logs to look for evidence of a breach. Meanwhile, I have been on the phone with Life Lock. They could tell me nothing about the notification and found nothing in their records for our domains. They sent me to Symantec, who owns Life Lock and handles the technical piece of their monitoring.

Symantec has no record of a breach or any suspicious activity on our domains, and lists us as a safe site.

Also, in their notification they cite a number of exposed records that is considerably larger than any database we have with login credentials. So I'm not quite sure to make of all this but we will continue to investigate and keep you posted.

FWIW, while searching for the Life Lock customer service number I found that they were breached last month to the tune of 4 million email addresses and were fined $100 million in 2015 for failure to protect extremely sensitive customer data, like address, DOB, and SSN. they don't seem very buttoned up, but we take this very seriously and will continue to investigate every available avenue.
 
Feb 17, 2006
5,274
Lancer 27PS MCB Camp Pendleton KF6BL
Lifelock can be spoofed. Any email address can be spoofed. The key is to check the original content of the email. Do not rely on the visible email address.
 
Apr 25, 2017
195
pearson 26 holland mi
i work in information security as an engineer, its kinda my jam anyone want to share one of these questionable emails (if you can include the headers, usually 'show source' or some such) and i'd love to take a sec and look it over. just... if you do don't click the link :p a screenshot of the link and where its directing to will be safe though. better to just remove it so we don't share viruses. and any PII too - Personal Identity Information. If its a scam i bet i could find a smoking gun for it right away.
 
Status
Not open for further replies.