Open Side Menu Go to the Top
Register
Moneybookers 'potentially' breached Moneybookers 'potentially' breached

05-17-2013 , 11:15 AM
Dear All,

On the 13th and 14th May my moneybookers account was hacked and a total of ~$12k was stolen in 3 separate transactions over a 24 hour time period.

The account was first accessed on 11th May by an Indian IP address.

I have since been in contact with 4 other high stakes pros whose accounts were attempted to be breached from 9th -11th May (by random IPs e.g. Columbia and Vietnam), but unsuccessfully as they had security tokens. (These are the only people I know with MB accounts).

All my poker accounts are untouched, but now closed until this is resolved.

I am curious to know how widespread this issue.

Thank you

(Mods please move if in wrong message board)
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:18 AM
I have received maybe three emails in the span of a few months that someone tried to access my moneybookers account.
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:20 AM
Anyone in these specific dates though first 2 weeks of May...
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:26 AM
No, the last one was March 9th.
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:31 AM
Quote:
Originally Posted by Louis Cyphre
I have received maybe three emails in the span of a few months that someone tried to access my moneybookers account.
same here

- one at may, 10th
- another early february
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:33 AM
Got an email 4 days ago (13th of May) that someone unauthorized tried to log into my account. No information about IP given. I didn't worry too much since I use a security token.

Sorry to hear about your loss. Really hope you get the money back.
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:47 AM
Also got my first failed login email (ever) last week.
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:57 AM
Quote:
Originally Posted by ContentNutzen
Got an email 4 days ago (13th of May) that someone unauthorized tried to log into my account. No information about IP given. I didn't worry too much since I use a security token.

Sorry to hear about your loss. Really hope you get the money back.
I had a failed login attempt email on 8th May. Third I've had and all within recent months. Original attempts were from an IP in Turkey (I'm in UK). I've now got a security token too.
Moneybookers 'potentially' breached Quote
05-17-2013 , 11:59 AM
This cant be coicidence. My moneybookers someone tried to log in 2 times in first week of May. Never happened before. I requested the IP's , it was someone from USA and Chile. Moneybookers blocked any outgoing transfers since then and i had to change my email and password and now after 3days , them still not have unlucked my account.
****ing people try to breach moneybookers accounts. Hope they burn in hell.
Moneybookers 'potentially' breached Quote
05-17-2013 , 12:04 PM
I think whoever is doing it is using random IP addresses. As another buddy told me a Ukraine IP tried to access his account.

I have been advised by MB to report to police on top of work they are doing.

If anyone's account has been breached or attempted to be breached within the first 2 weeks of May, personally I would greatly appreciate it if you could report to the police.

For UK Residents we should report to action fraud unit:

http://www.actionfraud.police.uk/

Phone number: 0300 123 2040

Personally my advice to any of you whose accounts were breached would be to change any poker software password that may be the same as your moneybookers and be very careful with your registered email address.

In addition if you have lost funds your money should be protected under FCA guidelines unless you have been grossly negligent. Please see the link below for more information.

http://www.fca.org.uk/static/fca/doc...ghts-guide.pdf
Moneybookers 'potentially' breached Quote
05-17-2013 , 12:05 PM
I opened a skrill account in the past and never ended up doing anything with it. I got an e-mail a couple weeks ago that someone had a failed login.
Moneybookers 'potentially' breached Quote
05-17-2013 , 12:11 PM
Moneybookers should be safe more with this, how can they let someone from Indian IP let the whole bankroll transfer in 24h.
Moneybookers 'potentially' breached Quote
05-17-2013 , 12:45 PM
I admit that it is an issue, but that is something I am personally discussing with them.

This thread is intended to find out if anyone else account has been breached (attempted or actually) and if so please report to police.

Thank you.
Moneybookers 'potentially' breached Quote
05-17-2013 , 01:08 PM
Not breached, but i have had a few failed login-messages this year. Last one was mid-may.
Moneybookers 'potentially' breached Quote
05-17-2013 , 01:13 PM
I had a failed login attempt approx 1 week ago as well. I have a security token so the account could not be accessed.
Moneybookers 'potentially' breached Quote
05-17-2013 , 01:21 PM
Had one failed attempt on 8th of May and one at the 31th of January. Have a security token so nothing happened.
Moneybookers 'potentially' breached Quote
05-17-2013 , 01:27 PM
Same, had one failed attempt on 11th of may. Looks like someone used the passwords and emails of an online casino.
Moneybookers 'potentially' breached Quote
05-17-2013 , 01:46 PM
Had a few attempts on an old skrill account that i don't even use anymore and i forgot the password so don't know how to close it ...

How can i get a security token for my active skrill account ?
Moneybookers 'potentially' breached Quote
05-17-2013 , 02:10 PM
I also had a failed login attempt on May 6th. Found it weird, since I think it's happened only once before, perhaps some time in 2011 or 2012.

Have security token, obv. For what it's worth (others please correct me if I'm wrong), you only get that 'failed login attempt' email if the person uses your correct email address, but wrong password. In other words, I don't think it generates that email if you get the verification Captcha wrong, or enter the wrong RSA token #. Not sure what there is to do with that info but...well, i guess I didn't feel TOO vulnerable since I have the RSA token. OP, did you have an RSA token?

I honestly can't understand why ANY site or e-wallet that wants to be taken seriously in 2013+ would not offer one.
Moneybookers 'potentially' breached Quote
05-17-2013 , 02:36 PM
This is a really crappy situation. I'm sorry for those affected, and the rest of us should tread carefully.

I don't know the answer to the above question re: failed login attempts. However, one thing I do know for sure is that Skrill is among the e-wallets that DOES offer an RSA security token for all accounts, VIP or otherwise. It's free for VIPs, and 15 EUR for non-VIPs.

In addition, Skrill has a 100% Money-Backed Guarantee in case someone beisdes you access your account AND you're using the security (RSA) token. If OP wasn't, obviously he is not going to qualify for that.

For those interested...

The Terms and Conditions say this:

“Skrill (Moneybookers) offers a 100% Money-back Guarantee. In the unlikelihood that you suffer a financial loss as a direct result of unauthorized access to your account, we will reimburse you in full, in respect of the funds in your Account. To clarify, for the purpose of the 100% Money-back Guarantee, “unauthorized access” means a transaction that is processed in your Account (as defined by clause 3.1 of the Skrill (Moneybookers) Account Terms of Use through the Skrill (Moneybookers) websites without your permission, authoirisation or knowledge and where it can be established that you are a victim of frat or theft.”

Skrill also has a similar policy for fraud on their Master-cards when Fraud occurs, which is a good thing.

There's more in clause 3.1 about this Money-Back Guarantee, but the main point is I'd encourage everyone, VIP or otherwise, small balance or large, to get a security token on their Skrill account. They only take 3-4 days to arrive once ordered.
Moneybookers 'potentially' breached Quote
05-17-2013 , 02:43 PM
How do i get one ?
Moneybookers 'potentially' breached Quote
05-17-2013 , 02:43 PM
I got an email of a failed login on May 10th.

I use a security token.

Last half year there have been an increase in failed logins as before I had maybe one and now it probably totals around 7

Where in moneybookers can you see where the ip originated from?
Moneybookers 'potentially' breached Quote
05-17-2013 , 02:53 PM
you can get a security token on the website -- security centre on the left --> order new token. Anyone reading this should do that immediately.
Moneybookers 'potentially' breached Quote
05-17-2013 , 03:39 PM
wierd ....can't see that option anywhere
Moneybookers 'potentially' breached Quote
05-17-2013 , 03:40 PM
My wife and I both received one email each of failed login attempts on May 5th.

This is the fourth one on my account in 14 months; the first on my wife's. The ones on my account are all 3-6 months apart.
Moneybookers 'potentially' breached Quote

      
m