His dad is running it now, and has been on top of the customer service from what ive seen.

2/27/2006 11:00:20 AM

^ EV! what happened to PEC?

-banshee740

2/27/2006 11:03:17 AM

anybody having any issues?

3/28/2006 12:09:15 AM

can anyone access their /admin page?
the redirect to
https://207.44.160.88:19638/webhost/services/virtualhosting/siteadmin?ocw_login_domain=xxx
seems to give a server configuration error. i need me some phpmyadmin!

4/1/2006 2:16:35 PM

i sent in a support request for that problem yesterday.

i can still get to phpmyadmin though. url is http://207.44.160.88/MyAdmin/index.php

4/1/2006 2:40:49 PM

SO THESE MOTHERFUCKERS JUST PUT A $500 CHARGE ON MY FUCKING CARD

WHEN THIS SHIT POSTS, WACHOVIA IS DOING A DISPUTE FOR ME, BUT WHAT THE FUCK???

AND OF COURSE I CAN'T GET A RESPONSE FROM THESE FUCKERS

I AM ABOUT READY TO SUE

TO TOP IT OFF, I CANCELLED MY SHIT A YEAR AGO

[Edited on April 3, 2006 at 10:12 AM. Reason : *]

4/3/2006 10:03:46 AM

damn

4/3/2006 10:18:13 AM

$500!!

For what man? Are they back billing for bandwidth or something?

4/3/2006 10:33:25 AM

seeing as how i haven't had an account with them in over a year, and the two years prior to that was a $25 a year student package, and that i always settled up for any bandwidth overage (maybe once or twice by less than 100 mb) i'd have to say that this is some sort of error or fraud.

either way, i'm pissed.

4/3/2006 11:05:18 AM

i learned my lesson after hassell

and only buy my hosting from people that do it for a living, and have done so for a long time

4/3/2006 11:08:14 AM

yeah that's what i did once i left these fools

4/3/2006 11:10:45 AM

Hey guys, I dont work for progress anymore, but I heard about the charges through the grapevine and went investigating. Appears as though someone hacked the RTWare processing gateway that progress uses and just went on a random transaction hunt.

Its out of Progress's hands, but I talked to my dad (currently running progress) and he said that he can provide any documentation your bank needs to verify this is a fraudulant charge. It didnt go through progress's actual billing system, but did have our merchant number attached to it. Over $475,000 was authorized in under 5 minutes.

Also, according to the bank, it was for authorizations only, the actual captures couldnt be completed because they had no actual transaction number.

Hope that helps some of you.

4/3/2006 12:17:19 PM

so does that mean that it won't actually end up going through?

right now the $500 charge to me is sitting in "hold" status

4/3/2006 12:35:05 PM

Correct. The transactions were authorizations only, and were caught as soon as they went through, and voided. They cannot be closed out, which means in a few days, the authorizations will disappear and the "hold" on the money will be released.


It tied up money on my card as well

4/3/2006 12:41:57 PM

i will now direct my "THESE MOTHERFUCKERS" statement toward whoever did this.

as an aside, i just had my current card cancelled and requested a new one from my bank to be on the safe side.

4/3/2006 12:43:53 PM

shit

are they investigating the matter?

I REALLY don't like my card number being in the hands of people that would do nefarious things with it.

4/3/2006 12:44:30 PM

hmmmmm

icky

did you hear anything about the issue agent lion brought up?

ps
i sent in a support ticket the other day, and they responded quickly and hoooked me up


[Edited on April 3, 2006 at 12:46 PM. Reason : t]

4/3/2006 12:46:19 PM

I cancelled mine as well and got a new card coming.

Thats all I know about it right now, im sure ill talk to my dad in the next day or two and will find out more.

For now all I know is that nobody is actually getting charged anything. Havent been on TWW in a while, but knew that a few of you would be effected and I should come let you know. Seems as though only about 10-15 of progress customers had thier card number used, the rest were from various other companies across the country. Somethin like 1500 cards were attempted to be run, with about 950 of them actually authorizing. Progress only has like 150 customers, heh, so the big question now is on the bank, i.e., where did the card info come from, cuz it wasnt the Progress server.


Just got this from my dad in an email, wanted me to pass it along to you guys to show the batch was successfully closed with no charges going through:

Quote :

" Settlement Time: Sunday, April 2, 2006 Merchant: Progress Systems LLC(XXXXXX) Batch ID: 39800534 Settlement Status: Success. The following are the Authorize.Net totals and the processor totals: Authorize.Net totals: Total: 0.00 (0 transactions) Debits: 0.00 (0 transactions) Credits: 0.00 (0 transactions) Host totals: Total: 0.00 (0 transactions) "

4/3/2006 12:52:19 PM

hmmmm

prog systems doesn't have any information for my credit card

guess i'm safe?

or should i check paypal?

4/3/2006 1:02:26 PM

Well looks like you guys beat me too it but here is the email I got

Quote :

"Evan, Our virtual credit card terminal was hacked Sunday and our merchant account stolen. Even though Progress Systems was not involved, we have cancelled all of the charges that were made (although all charges did not validate) but this will speed up the recovery. This was a professional crime and the authorities have been notified. The criminals intent was to test the validity of account numbers and verify at least $500 available credit. What this means to you is your account number has been stolen and you should notify your bank to cancel your account and reissue a new account. Your account information did not come from us and we don't know where the criminals got it at this time (so far, you are the only one of our actual customers this has happened to). Be assured all your account information has been deleted. Sorry for the inconvenience. --Jay. Progress Systems, LLC"

4/3/2006 2:35:57 PM

Make my CC# yet another that just bit the dust. As soon as I saw that $500 was charged despite my repeated attempts to cancel (and the $25 renewal charge that I didn't authorize & tried to stop), I just gave up and nixed the damn card.

Thanks for the fun night!

4/3/2006 9:29:32 PM

on a good note

my /admin page was back up last night

4/4/2006 10:44:18 AM

Add mine to the list.

Now how can Jay claim this isn't Progress related?

Btw, are you guys canceling the account altogether or getting your bank to switch card numbers and send you a new one?

4/4/2006 9:43:26 PM

i had them issue me a new card

[Edited on April 4, 2006 at 10:24 PM. Reason : obviously with new numbers]

4/4/2006 10:20:35 PM

With a new number right?

4/4/2006 10:24:15 PM

yeah

4/4/2006 10:24:42 PM

chance i did both.

4/4/2006 10:25:02 PM

A 16k limit is hard to just close. I guess I'll have to go back to checking it once every few days as opposed to monthly.

Yea, I haven't had a new card issued so I wasn't sure if that meant new number, because the last time I got a new card due to the old one expiring it was the same number (maybe different security num).

This is why I think it is the dumbest thing ever for sites to think it is no problem to store your account numbers. I had no clue mine was saved with progress.

4/4/2006 10:29:19 PM

i wasn't sure either, so i spelled out specifically that i wanted a new number

4/4/2006 10:37:44 PM

i took my CC out of their system a year ago I think (replaced by paypal payments), but are they still storing it? I can't even remember which card I used to use for them. I checked my main accounts and don't see any unusual activity. THose of you who've seen false charges - how did you find out? did you just check your online statements?

4/5/2006 2:27:12 AM

Just an update to explain a little about what happened as I understand it:

It was NOT the progress server that got hacked. Progress does store numbers, but they are encrypted by our billing software (Modernbill). They access authorize.net through a third party called rtware.net. Progress posts cards to rtware.net through SSL. When people do cancel with Progress, thier card info gets deleted from the system permanently, in order to avoid a re-bill mistake or anything like that.

What appears to have happened is that they got a hold of transaction logs from rtware.net and just randomly tried all the numbers in it. Only about 10% of the numbers tried were progress card numbers, the other 90% came from other merchants that also use rtware.

Up to this point, rtware hasnt seemed to care much, so I know my dad has spent some time looking for a new gateway, and will probably switch in the next day or two.

Hope that helps enlighten you guys.

PS: My credit card company (discover) had no problem giving me a new number while keeping this account open.

4/5/2006 7:48:16 AM

how long is it going to take for this money to go back into my account? it's still sitting in "hold" status and unavailable.

wtf. this pisses me off to no end.

^wait, a criminal action occured to these rtware people and they don't care much?

[Edited on April 5, 2006 at 8:26 AM. Reason : *]

4/5/2006 8:18:24 AM

I paid with paypal for my accounts, but a customer of mine just called complaining of the $500 charge.

What a mess. Glad to see you're already on top of it. Thanks.

4/5/2006 2:33:14 PM

http://www.fatwallet.com/news/?storyid=599102

4/6/2006 9:41:00 AM

I'd like to know how someone that doesn't have service with Progress, still got dinged for a charge, and yet this has nothing to do with Progress?

That doesn't add up to me.

4/6/2006 10:14:19 AM

man.....

4/6/2006 10:31:09 AM

Quote :

"I'd like to know how someone that doesn't have service with Progress, still got dinged for a charge, and yet this has nothing to do with Progress? That doesn't add up to me."

did you actually read the story? it explained that.

4/6/2006 10:32:19 AM

GOt it now

Quote :

"These hackers got their hands on high quality data, and they used merchants of ours to run that data through the merchant's Web site, which goes through our platform,"

[Edited on April 6, 2006 at 10:51 AM. Reason : x]

4/6/2006 10:39:03 AM

Like I said, this goes way beyond Progress.



I am really sorry for anyone this impacted, but there isnt anything we could have done from our end to prevent it, other than have picked a different gateway to start with.

4/6/2006 12:37:08 PM

What I am curious to know and maybe this isn't answerable here, is where my number was stored that someone had access to it?

Thats what I would like to know more than anything.

4/6/2006 12:42:09 PM

Thats an extremely good question, because I know for a fact, the only time i used my discover card number was to verify our processing gateway worked when we first opened several years ago.

What it seemed to me, is that the processing gateway was storing card transaction logs, and the hackers got those some how.

What burns my ass the most personally, is that the gateway, rtware.net wont step up and make any kind of claim of responsibility, or even say they are working on it. They are letting the brunt of this fall on people who could have done nothing to prevent this.

4/6/2006 1:34:06 PM

Why does progress use RTware? Authorize.net is an online payment gateway, why not just use that?

4/6/2006 8:26:21 PM

My credit card wasn't hit but I did use one for my payment last year. Any chance I could still be affected?

4/7/2006 9:28:35 AM

I am not speaking officially, but here is what I did.

I only swapped out the card that got hit by this. My reasoning is multi-fold, first, the fraud departments of credit card companies are so on the ball nowadays, its nothign more than a call to get it straightened out (and the inconvenience of waiting for a new card/having money tied up for a few days). The other reason is because as i find out, they keep track of how many times your card gets "lost/stolen" and can/will use that against you.

I had a card a while back that just through random coincidences got stolen 3 times in a year, and the third time, they ended up doing a pretty big investigation to make sure I wasnt doing it myself and just reporting it stolen.


Just my two cents.

4/7/2006 1:00:11 PM