*ALL TAD GEAR CUSTOMERS*

Airsoft safety discussion. Post here with questions about laws and safety concerns.

*ALL TAD GEAR CUSTOMERS*

Postby m3chanized » Fri Nov 20, 2009 3:19 pm

Dear Customer:

We are writing to you because of a security incident at TAD Gear. We recently learned that our database was illegally accessed from an external source, and it appears that some customer data were taken, which may include customer names, contact information and credit card data. The possibility of a security breach came to our attention when certain customers notified us that unauthorized charges had appeared on their credit cards. Upon learning of the potential breach of security, TAD Gear immediately initiated an investigation, and took corrective steps based on the advice of an internet security firm. We have also contacted law enforcement.

If you purchased merchandise from TAD Gear on-line between August 6, 2009 and November 16, 2009, and the credit card used to purchase that merchandise is still valid, in order to protect yourself from the possibility of identity theft or misuse of your credit card information, we recommend that you immediately contact the issuer of that credit card and close your account. Tell them that your account may have been compromised. If you want to open a new account, ask your credit card issuer to give you a PIN or password, as this will help control access to the account.

In addition, we recommend that you place a fraud alert on your credit files. A fraud alert lets creditors know to contact you before opening new accounts. Just call any one of the three credit reporting agencies at a number below. This will let you automatically place fraud alerts with all of the agencies. You will then receive letters from all of them, with instructions on how to get a free copy of your credit report from each.

Experian Equifax TransUnion
888-397-3742 866-640-2273 877-701-5276

www.experian.com www.equifax.com www.transunion.com

When you receive your credit reports, look them over carefully. Look for accounts you did not open. Look for inquiries from creditors that you did not initiate. And look for personal information, such as your home address and Social Security number, which is not accurate. If you see anything you do not understand, call the credit reporting agency at the telephone number on the report.

If you do find suspicious activity on your credit reports, call your local police or sheriff's office and file a police report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. Even if you do not find any signs of fraud on your reports, we recommend that you check your credit report every three months for the next year. Just call one of the numbers above to order your reports and keep the fraud alert in place.

For more information on identity theft, we suggest that you visit the web site of the California Office of Privacy Protection at www.privacy.ca.gov, or the Federal Trade Commission at www.ftc.gov/bcp/edu/microsites/idtheft. If there is anything TAD Gear can do to assist you, please email us at action@tadgear.com, a special email address that we have set up to help answer your questions.

On a going-forward basis, in order to help assure the security of your information, all users will be required to recreate their usernames and change passwords upon logging onto our newly redesigned, TAD Gear website. Please note that the password change process is only initiated when you come to the TAD Gear website and as a result an email is sent to you. Do not respond to any other unsolicited emails regarding password changes from TAD Gear. TAD Gear will not contact you by email regarding a password change unless you initiate such a change on the TAD Gear website in accordance with the instructions above.

We are sorry for any inconvenience that this might have caused you. We take the protection of our customers' personal information very seriously. TAD Gear is making additional, significant investments in enhancing the safety and security features on our website so that you may feel confident using it. While no company can completely prevent unauthorized access to data, we are committed to ensuring that our data is protected by the highest levels of security.

If you have any questions or need further information regarding this incident, please do not hesitate to contact us.

Sincerely,

Patrick York Ma
CEO
TAD Gear, Inc.[


got this email today, called my buddy to let him know but it was too late.

sorry guys, this is such a pain in the a$$
Image
User avatar
m3chanized
Soldier
Soldier
 
Team: N/A
Posts: 236
Age: 37
Joined: Sun Apr 08, 2007 3:04 am
Location: wendy land

Postby BoogeyMan » Sat Jan 16, 2010 9:17 pm

Yeah and I was one of the unfortunate ones whose credit card was used in transactions. What a pain in the a$$ to put a fraud alert & get my accounts back in order. Will not order again from T.A.D. They can charge you up the @$$ for gear, yet they can't spend any of that money on website security? Weak sauce...
BoogeyMan
 
Team: RR KBAB

Postby Wombat Six » Sat Jan 16, 2010 9:28 pm

VTEK911 wrote:Yeah and I was one of the unfortunate ones whose credit card was used in transactions. What a pain in the a$$ to put a fraud alert & get my accounts back in order. Will not order again from T.A.D. They can charge you up the @$$ for gear, yet they can't spend any of that money on website security? Weak sauce...


While I understand your frustration, they aren't the first retailer out there to get hacked in spite of the security precautions taken. Considering they've got a VeriSign Extended Validation certificate, they're spending money on security. I also know that they are required by their processing agreement with Visa, Mastercard, and the other big names to run a regular security audit (look up PCIDSS sometime). So, I won't be writing off T.A.D. because of a hack, but I will be keeping an eye on the credit card I use for that. One more reason to use a separate card for online shopping than your day-to-day Visa debit card.
Ludere Causa Ludendi
User avatar
Wombat Six
Specops
Specops
 
Team: N/A
Posts: 1569
Age: 40
Joined: Mon Dec 12, 2005 10:16 am
Location: Tualatin, OR

Postby BoogeyMan » Sat Jan 16, 2010 11:11 pm

Yeah thank god I used a separate card. There were a bunch of odd charges. Mostly telephone calling cards from really obscure websites. Too bad not a whole lot can be done with those breaches. Most internet crime is referred to the FBI, and I can tell you that they're not going to do a whole lot besides give you a case number for your insurance/bank claims. They'll go after criminals who've obtained a large sum of info/cash/etc. Having worked law enforcement and talked to people wanting to open a case to locate the suspect, there's nothing we can do. Jurisdiction is a problem with the internet.
BoogeyMan
 
Team: RR KBAB

Postby danneskjold » Mon Jan 18, 2010 8:44 am

The FBI is involved, and while I am not privy to the details it is my understanding that the breach had little to do with TAD - all of their website stuff was outsourced to another company - who is now being sued I believe.

I wouldnt blame TAD on it.
User avatar
danneskjold
Specops
Specops
 
Team: N/A
Posts: 1169
Age: 36
Images: 2
Joined: Fri Nov 25, 2005 9:56 pm
Location: Seattle, WA


Return to Safety/Legality

Who is online

Users browsing this forum: No registered users and 7 guests