Check your card. Their server was compromised on the 11th. I got hit for $800 and am still in the process of fixing it.
Yes that is correct... I have no intention hide the fact that this has happened to Digitalciggz.com and some of my customers because my site WAS compromised. I can only hope that by me doing the right thing when it happened, and letting ALL of my customers know that the incident occurred, offering any help where I could assist with in resolving any issues that arised, and being transparent with the whole process will help win my customers confidence back.
Here is a snippet from the email that was sent out to all my customers when I became aware on 11/11/2010 that my site was compromised and that there cc information was at risk.
"As you can only imagine we are mortified that this has happened to our website and potentially our customers and we hope that you will take this letter in good faith that we care very much about your security and safety as an online consumer, and are so very grateful to have you as our customer.
We hate the thought that you have to go
through this because of shopping at our website, and we can only hope that our excellent customer service, and reputation as a leading supplier will win your confidence back to
shop with us again.
We take this breach of our data seriously, We immediately reported this crime to local law enforcement authorities, as well as other federal authorities. We also reported the incident to Visa and Mastercard. We have engaged an outside, highly recognized security firm to determine how this incident occurred and to confirm that information we obtain is protected to the fullest extent reasonably possible. Here is what we have done at Digitalciggz.com to ensure this cannot happen again.
1:The malicious hacker code that was the root of this incident has been permanently removed from the website. THIS WAS THE ROOT OF THE PROBLEM and was fixed at exactly 11/11/2010 at 11:20 PM PST.
2: The whole website has been moved to new dedicated secure server.
3: The SSL Certificate has been upgraded to a more advanced encryption bit.
4: The Website and all its files are now scanned hourly by a private company to ensure that there is no way that any malicious code can be injected on the website again.
The Site is now MORE THAN Fixed and 110% Secure. and I continue to keep it this way, and help resolve any issues as best I can, however I can.
If any vendors, or people would like ask me questions about this, what preventative measures I have taken, and the security of my site, I ask that you please email me directly at
michael@digitalciggz.com
Best Regards,
Michael Mullins (Owner of Digitalciggz.com)
