BPI - Credit Card "Data Incident"

[Kevin McCormack]

These types of incidents have increased dramatically during the pandemic. I get an e-mail or text message about every month and a half "thanking me" for my recent purchase of an expensive desktop or laptop computer. Usually labeled Microsoft or MacBook. An official looking invoice is always included announcing that my credit card (unspecified) will be charged with the balance, and gives a prompt to access the "pay now" toggle. Also being plagued lately on my cellphone with similar messages showing my "balance owing" for shipping in ridiculous amounts ($1.82; $6.71) for something I never ordered. Always directed to another "pay now" prompt to ensure my "order" is released. Scattershot hackers are having a field day with these and other scams lately.

[Double Lab]

Frank,

Is there a time frame associated with these breaches that you know of?

[Stan Hoover]

Thanks for the heads up Frank,

I also recently purchased from BPI, and received their data breach email yesterday.

Thankfully after checking my credit card activity this morning, fingers crossed, but no charges other than the ones I’m responsible for.

Stan Hoover

[Cold Spring]

Originally Posted by Daryl Corona

Frank,

Is there a time frame associated with these breaches that you know of?

Daryl, my next to last order with BPI was about 8 weeks ago and using a different credit card. No problem with that one. The last order was entered about 2-3 weeks ago. That was with the credit card that is now locked. Putting this together, I'd say the suspect period possibly started in late March.

The real question which wasn't addressed in BPI's email is whether BPI used due diligence in selecting that third part vendor to process and probably store CC information. That was (apparently) a fairly recent change by BPI. Over many past orders I used to get a credit card receipt emailed to me by a woman at BPI when she ran my card and a day or so before the order was shipped. But on the last order where the CC number was hacked I didn't get anything from the woman and (apparently) BPI had assigned that task to the third party vendor referenced in its email.

[Dean Romig]

My Master Card was hacked in early January and purchases were made with a company in Great Britain in the amount of several hundred dollars. My bank contacted me and helped to find out where these purchases were made… there were even a couple of smaller purchases made in Cal and Nevada. My card was locked and I went to my bank to initiate the issue of a new card. I got the smaller purchases credited to me within days but didn’t get credited for the overseas charges until late in March.





.

[ArtS]

The particular card I had compromised was a Bank America Visa. The charge I saw the amount was at Lowe's for over $4000. BOA flagged all three and denied approval. They never made it to my account. They are the best I have seen at nipping these in the bud. The downside is that one time the card was locked while I was on vacation, and was due to a new, but large, purchase I had made.

[Mike of the Mountain]

We've had probably 4 cards, at least, hacked in the last two-three years. Our bank is very good at contacting us regarding any fraudulent charges plus using the online account we can track every charge and check. For instance, we didn't know we were in San Fran using an Uber on New Years Eve. That's why we really like our bank, never had to fight to get the charge reversed.

[Double Lab]

The sad thing is someone has got to pay for all those loses that aren't caught . Guess who that is?

[Jeff S.]

Like many of you, I also received the notice from BPI. I checked my recent CC activity and found zero unauthorized purchases. However, several years ago, I had to replace my card 3 times in the course of one year. Unfortunately, it happens. Small grocery purchases in Connecticut, multiple limousine services in California, and 5 nail guns in Michigan. It's a pain in the butt, however the CC company always took care of me.

[Jim McKee]

When buying reloading supplies, etc.I have for the last several years only been paying with a money order mailed to the company where the order is coming from. Most companies will accept a MO. Not as convenient as using a credit card but helps avoid scams.