4 ms·

article says we got an email notification? I didn't :( most recent message is to top up my account

by edoceo 6y ago

itbeforesunset 6y ago
According to article, only 1% of users are affected and only those have been notified. I have received the e-mail.
- edoceo 6y ago
  oh, I shouldve scrolled further. in my defense the page was doing that jumpy /jerky scrolly jank that frustrates me so I bailed early.
  - itbeforesunset 6y ago
    You're apparently lucky in two cases. No email. And with a top-up notification, also no CC on file. :)
- mandeepj 6y ago
  How they know only x% of users effected and which one? Not sure if they concluded that after reviewing the leaked data?
  - itbeforesunset 6y ago
    Interesting question where TC got that information. The e-mail only states "This exposure impacted a small percentage of our customers." but no explicit percentage. EDIT: Rereading the article helped: they received a statement from DO.
    - mandeepj 6y ago
      Thanks. But, I was trying to find out - how ‘DO’ - or any other breached company for that matter - come to know about the effected users. Sorry, I missed mentioning that
dcrn 6y ago
Definitely did not receive an email after Privacy blocked the transaction from happening on my DO card.
gengear 6y ago
I did these are contents of the email. Hello, On April 26, 2021, we confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account. The exposure has been fixed, and your complete payment card account number was not exposed. We will monitor your DigitalOcean account for any unusual activity. No action is required by you at this time. What happened: An unauthorized user gained access to some of your billing account details through a flaw that has been fixed. This exposure impacted a small percentage of our customers. The unauthorized access occurred between April 9, 2021 and April 22, 2021. The following billing profile information was accessed: Billing Name Billing Address Payment Card Expiration Last 4 Digits of Payment Card Payment Card Bank Name We do not store your full payment card account number, and it was not exposed. What we have done: We have fixed the flaw that enabled this exposure, and unauthorized parties can no longer access this information. We have notified relevant data protection authorities. To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring in the future. How this impacts your account: Your DigitalOcean account was not accessed. Our account recovery procedures require more information than what was exposed. Your account is not at risk. Your account password and tokens were not involved in this exposure. Requests to change your account details may take longer to process and may require additional verification. No action is required by you at this time. We believe in holding ourselves accountable to our customers and are committed to protecting your account. We welcome the opportunity to talk through any questions or concerns you may have — just reply to this email. Thanks, Trust @ DigitalOcean

article says we got an email notification? I didn't :( most recent message is to top up my account

by edoceo 6y ago

article says we got an email notification? I didn't :( most recent message is to top up my account

itbeforesunset 6y ago

According to article, only 1% of users are affected and only those have been notified. I have received the e-mail.

edoceo 6y ago
oh, I shouldve scrolled further. in my defense the page was doing that jumpy /jerky scrolly jank that frustrates me so I bailed early.
- itbeforesunset 6y ago
  You're apparently lucky in two cases. No email. And with a top-up notification, also no CC on file. :)
mandeepj 6y ago
How they know only x% of users effected and which one? Not sure if they concluded that after reviewing the leaked data?
- itbeforesunset 6y ago
  Interesting question where TC got that information. The e-mail only states "This exposure impacted a small percentage of our customers." but no explicit percentage. EDIT: Rereading the article helped: they received a statement from DO.
  - mandeepj 6y ago
    Thanks. But, I was trying to find out - how ‘DO’ - or any other breached company for that matter - come to know about the effected users. Sorry, I missed mentioning that

dcrn 6y ago

Definitely did not receive an email after Privacy blocked the transaction from happening on my DO card.

gengear 6y ago

I did these are contents of the email. Hello, On April 26, 2021, we confirmed an unauthorized exposure of details associated with the billing profile on your DigitalOcean account. The exposure has been fixed, and your complete payment card account number was not exposed. We will monitor your DigitalOcean account for any unusual activity. No action is required by you at this time. What happened: An unauthorized user gained access to some of your billing account details through a flaw that has been fixed. This exposure impacted a small percentage of our customers. The unauthorized access occurred between April 9, 2021 and April 22, 2021. The following billing profile information was accessed: Billing Name Billing Address Payment Card Expiration Last 4 Digits of Payment Card Payment Card Bank Name We do not store your full payment card account number, and it was not exposed. What we have done: We have fixed the flaw that enabled this exposure, and unauthorized parties can no longer access this information. We have notified relevant data protection authorities. To be extra careful, we have implemented additional security monitoring on your account. We are expanding our security measures to reduce the likelihood of this kind of flaw occuring in the future. How this impacts your account: Your DigitalOcean account was not accessed. Our account recovery procedures require more information than what was exposed. Your account is not at risk. Your account password and tokens were not involved in this exposure. Requests to change your account details may take longer to process and may require additional verification. No action is required by you at this time. We believe in holding ourselves accountable to our customers and are committed to protecting your account. We welcome the opportunity to talk through any questions or concerns you may have — just reply to this email. Thanks, Trust @ DigitalOcean