7 ms·
I don't know about the passwords, but my card was successfully stolen[1] and a malicious transaction was initiated from another country. I know this was because
by neya 13y ago
I don't know about the passwords, but my card was successfully stolen[1] and a malicious transaction was initiated from another country. I know this was because of Adobe for sure because I (co-incidentally) used a brand new, fresh, unique e-mail address just for Adobe, and that email was released recently in the dump that the hackers provided.
Luckily the malicious transaction was declined by my bank and they blocked the card for me and they told me that someone had compromised my card details and issued me with a replacement card free of charge.
I only keep posting this in every thread[1][2] about Adobe because I genuinely want other Adobe customers to understand the gravity of the situation and disable their compromised credit card and get it replaced by a new one as soon as possible.
[1]https://news.ycombinator.com/item?id=6668013 https://news.ycombinator.com/item?id=6668013
[2]https://news.ycombinator.com/item?id=6632385 https://news.ycombinator.com/item?id=6632385
- jordanthoms 13y agoSo you know for sure your email was stolen in the attack, but how do you know the credit card was?
- neya 13y agoIt was only the night before the hack had I bought an Upgrade to the CS6 suite. In all probability, mine would have been listed out in the recent few transactions on Adobe's database, maybe? There is only one other service I am using this card with - A stock photo site and they haven't announced any security issues, yet. Plus, I always am required to enter my card details on their site each time I buy something, in all likelihood, they aren't probably storing the card on their servers, which leads us to the culprit, Adobe. Also, I am very security conscious in general. I am no security expert, but I always use Linux/Mac to make transactions, with Firewalls, stuff like that.
- jrnkntl 13y agoMy creditcard and the one of my coworker got blocked too; I only use this one for company expenses, Adobe being one of them. The only overlapping service my coworker and I paid for with a creditcard was: Adobe. We both got a new one in a week from our banks; but this, to me, makes it look like it was definitely compromised because of the Adobe breach.
- wesley 13y agoIs there an online service to check your email address is in there? I didn't get an email from them (perhaps it got stuck in my spam folder that gets auto-deleted weekly), but my credit card got hacked soon after.
- po 13y agoThis one: http://adobe.cynic.al/ http://adobe.cynic.al/
- annnnd 13y agoWhat is that all about? The site makes a claim of making a search through 150mio records a big deal. Ok, it is not trivial, but any decent DB with proper indexes would have no trouble doing that. Am I missing something? Also, they want me to enter my e/mail to check... <lost me here already>. Seriously?
- deleted 13y ago[deleted]
- bennyg 13y agoIt checks if your email is in the dump. What would you want, just a full list of everyone's emails in plaintext for the world to see?
- radiac 13y agoGiven they're no longer secret, that would seem safer than typing my e-mail address into an untrusted site to see if it has been compromised.
- afreak 13y agoWhile you should not take my word for it, I am friends with the owner of that site and it is perfectly safe to put your address into there. The author and I were sharing data.