Cyber Risks · Krebs on Security

Monoprice.com Shuttered After Fraud Complaints

Summary: Monoprice took its website offline around midnight on Friday, March 5, 2010, after customers reported fraudulent charges on cards used on the site, and stopped taking new orders while outside forensic investigators looked for evidence of card theft. Operations manager Vincent Lim said investigators had found no evidence that card data was stolen from Monoprice's network, and the company notified law enforcement, its payment processor, and card companies; a customer letter later cited a breach window of February 23 to March 5, 2010.

Why it matters: Customers reported fraudulent charges at iTunes, Blizzard, Microsoft TechNet, and megaupload after buying from Monoprice, and one customer's letter put the breach window at February 23 to March 5, 2010, yet notification did not reach some customers until the week of April 12. The gap between the first complaints and the letters is the part a security leader has to sit with.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related