A friend of mine recently linked her Cryptic account to PWE. Recently, as in a day ago.
This morning (PST time) her account was compromised and $100 was charged to her credit card.
As of now I'm terminating my STO subscription and with the recent keylogging threat on STOWiki, I would advise others to take the necessary security measures immediately.
She has submitted a PWE ticket but as usual, I don't expect any quick reply to said report.
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
Cheers,
Brandon =/\=
Thanks. I'm getting her to do that and other things to help prevent such things from happening on her end again. Hopefully the account can be restored soon.
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
Cheers,
Brandon =/\=
The full card number has to be stored somewhere, correct? I assume you mean that the full card number is encrypted in your database, and if the database is compromised, decrypting it is unrealistic, so that's what you mean by they can never have the full card number...
But really, if someone does get in, it's always possible they can get access to the key to, and can decrypt whatever they want. Makes the whole thing more difficult, but it's possible.
In any case, the fact that the OPs friend's card number was stolen very likely has nothing to do with linking the account. Your friend may have visited a restaurant that same night, why aren't you blaming the waiter that server you for copying the number down.. that (and similar incidents) does actually happen, and is far more likely than your credit card number being stolen online...
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
Cheers,
Brandon =/\=
All characters and items restored in the span of one day.
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
Cheers,
Brandon =/\=
They can if they click manage payment method. They will see everything. They already got the password didn't they?
Nope I could see my own payment detail when I click manage then edit payment method.
Well but it is PW account not Cryptic's
Well I consider it compromised then.
Best defence for anyone - use paypal, not direct credit payment. You have to login to paypal for each and every transaction, and that is a big added layer of security in case a PWE account is compromised.
Best defence for anyone - use paypal, not direct credit payment. You have to login to paypal for each and every transaction, and that is a big added layer of security in case a PWE account is compromised.
Or use credit payment then deleting the info right away. It's really stupid for PW not to provide the option for not saving our credit information. Steam gave us that option you know.
Have to say the VISA/Mastercard deal with the enter such and such letters/digits from password to buy online is a REALLY good idea. With all hope if mine ever became compromised this would stump them!
Best defence for anyone - use paypal, not direct credit payment. You have to login to paypal for each and every transaction, and that is a big added layer of security in case a PWE account is compromised.
Hasn't Paypal been TRIBBLE into before? I know their Twitter account was TRIBBLE.
I deleted my credit card information from my CRYPTIC account because of how the company handles things and their Shady practices. Then a week later, the card information was put back on even though I haven't bought anything so I had to delete it again.
I no longer trust this or PWE with credit card information.
Comments
Then ends with the blame being put on STOWiki.
Kinda weird, but it's hip and fashionable so I like it.
Beside that... Send a ticket named TRIBBLE to support.
*sigh* Well, luckily I have no idea how to link my account. :rolleyes:
If you'd like to keep chatting with several of the people here, you can register on 10ites.com.
I am so sorry to hear your friend had their account TRIBBLE; we take the security of your payment information very seriously.
Let me reassure you that there is no way for credit card information to be compromised. If you have a card on your account, and a hacker gets in, they can never view the full card number. The only damage they can do is purchase a subscription or points using the payment method on file. Since these transactions would be through Cryptic, we can take care of it as soon as we receive notification (i.e. a ticket or an email sent to customerservice@perfectworld.com).
Cheers,
Brandon =/\=
are you going to be comming back at some point?
Thanks. I'm getting her to do that and other things to help prevent such things from happening on her end again. Hopefully the account can be restored soon.
Either way, I truely hope you friend's account is restored.
The full card number has to be stored somewhere, correct? I assume you mean that the full card number is encrypted in your database, and if the database is compromised, decrypting it is unrealistic, so that's what you mean by they can never have the full card number...
But really, if someone does get in, it's always possible they can get access to the key to, and can decrypt whatever they want. Makes the whole thing more difficult, but it's possible.
In any case, the fact that the OPs friend's card number was stolen very likely has nothing to do with linking the account. Your friend may have visited a restaurant that same night, why aren't you blaming the waiter that server you for copying the number down.. that (and similar incidents) does actually happen, and is far more likely than your credit card number being stolen online...
All characters and items restored in the span of one day.
Thanks PWE
They can if they click manage payment method. They will see everything. They already got the password didn't they?
Nope I could see my own payment detail when I click manage then edit payment method.
Well but it is PW account not Cryptic's
Well I consider it compromised then.
Best defence for anyone - use paypal, not direct credit payment. You have to login to paypal for each and every transaction, and that is a big added layer of security in case a PWE account is compromised.
Or use credit payment then deleting the info right away. It's really stupid for PW not to provide the option for not saving our credit information. Steam gave us that option you know.
Hasn't Paypal been TRIBBLE into before? I know their Twitter account was TRIBBLE.
I no longer trust this or PWE with credit card information.