Data breach of TEquipment.net (+other) customer data (Eye4Fraud data breach) - Page 1
Forum section: electronics / testgear

author: asnth
author_rank: Newbie
timestamp: September 14, 2023, 07:31:38 am
content: It seems the unique email address I used for a tequipment.net order in Jan 2020 was caught up in a Jan 2023 data breach at Eye4Fraud (a fraud prevention service used by TEquipment.net, akaInterworld Highway, LLC).Neither TEquipment.net nor Eye4Fraud have notified me about this breach.Quote from:https://haveibeenpwned.com/PwnedWebsites#Eye4FraudList of sites/companies caught up in this breach:https://gist.github.com/troyhunt/e7c20fe9e970a2a928299760b11ed381(I assume TEquipment.net are here as "Interworldhighway")Early announcements of Eye4Fraud breach(es!):https://twitter.com/FalconFeedsio/status/1622838659689988098(https://archive.md/5szVA)You can use Troy Hunt's excellent website to see if your email is in the list:https://haveibeenpwned.com/Pretty disappointing that this chunk of my data was being held (well.. grossly mismanaged..) by a third party 3 years after the transaction. I would hope that TEquipment.net have since cut ties with Eye4Fraud.I'm appalled at TEquipment.net's mishandling of my data, since ultimately that responsibility resides with them.

author: kmo12345
author_rank: Newbie
timestamp: September 29, 2023, 08:25:00 am
content: Google One has a service where they monitor the dark web for your personal information and they just sent me a notice about this.I shopped at TEquipment for work purposes and found my company email, two previous credit cards, and my work address listed in the Eye4Fraud breach. Both previous credit cards have been compromised and based on the timing I can now confirm the credit cards were compromised after being used for purchases on TEquipment. What a disappointment...have i been pwned is good but it can only search for emails. The Google service monitors phone numbers, addresses, etcWhat is especially nasty about this breach is that many people use their phone numbers as an account reset method. I have now removed my mobile phone as a recovery number for as many online accounts as possible.

author: jonpaul
author_rank: Super Contributor
timestamp: September 29, 2023, 08:30:25 am
content: "You have no privacy anyway..GET OVER IT!"Scott mcnealley, CEO Sun Microsystems, 1999Jon

author: thm_w
author_rank: Super Contributor
timestamp: September 29, 2023, 10:51:24 pm
content: Quote from: kmo12345 on September 29, 2023, 08:25:00 amThat shouldn't be possible based on the information given in the link:" The data included names and bcrypt password hashes for users, and names, phone numbers, physical addresses andpartial credit card data (card type and last 4 digits)for orders placed using the service. "But maybe something else was up.

author: chicken
author_rank: Frequent Contributor
timestamp: January 22, 2024, 06:16:40 pm
content: I just received an “order confirmation” with suspect PDF attachment to the email address I exclusively use for my account at Tequipment. The email text also included my full name.So this breach is real. And shame on Tequipment for lack of disclosure.

author: ebastler
author_rank: Super Contributor
timestamp: January 22, 2024, 07:49:02 pm
content: Quote from: asnth on September 14, 2023, 07:31:38 amAs annoying as this is, you have to appreciate the hackers' sense of humor.