I think you should try checking if there is something common in the hacked accounts, what kind of internet connection did they use, what kind of devices did they play from, which version of pokerstars, OS, etc... Since the hacking does not seem to be widespread, there must be a reason why these accounts were hacked and others not, there must be something special about them.

BTW where can you find the login security settings in pokerstars 7 ? The links in the first post refer to pokerstars 6, and I just can't find a way to request a PIN in the 7 client.

p.s.:

OK I've found it, its under the 'Account' tab, I just wasn't expecting it to be among my personal details, so I automatically skipped those lines. I hate pokerstars 7.

Amaya ****ed Pokerstars up

You think Amaya shareholders would be happy to hear about this stuff going on?

Or read and act on the opening paragraph of the OP

-----

For people unable to find the PIN in Stars7 (perry close to the details in the links), it's: Account > PokerStars PIN > then request it

Or go one further and enable the SMS Security feature, again it's in the Account section a couple of lines below the PIN option
---

To those that were compromised, there are some questions at the end of the OP that you should answer in this thread as fully as you can. Its much easier than having to go through numerous posts about people's situations. Might also help to find a link between the hacks

did you sign up through an affiliate?

Ok I will get the ball rolling with filling in the questionnaire, hopefully more of the victims will do the same so we can try and figure out the similarities and differences between us.

Date & Time of 1st compromised:25 December 2014 09:28:32
Date & Time of last compromised25 December 2014 14:20:55
Deposit Details: Nothing Deposited
Withdraw Details: Funds were dumped to another account in a $1/$2 HU cash game. Dump was done in the most blatant way possible, my account raises to $99 and folds to the other accounts all in for $1 more. This happened multiple times and should have set off some red flags at Stars end, you would think.
Country of your account (where its logged in from): My account is registered to Canada but logged in from the UK
Country of Hack: Also Canada, other end of the country from were I was living, never visited there.
Is your password 100% unique: Yes
Did your Full Tilt Poker account have an access attempt also: No
Do you currently, or have you ever had a UK postal address on your PokerStars account: Yes, previously was UK registered
Was your PokerStars account dormant (last used regularly more than 60 days ago): No

@aggo - yes I registered through raketherake.com but my password there is nothing like my Stars account PW.

I haven't been hacked but I happen to live in Lethbridge. If there is anything I can do to help WRT local law enforcement don't hesitate to ask.

Wow it's surprising to see how far Stars has fallen. There was a time when they were head and shoulders above the field in terms of both security and customer service.

Stars just keeps getting worse. .....

I doubt that the actual hacker(s) would be living there, you can be almost sure that these IP-s were only proxies.

Maybe this is why Pokerstars are forcing customers to be liable. Did Daniel get a free pass, was he subject to Pokerstars own TOS? Did he get reinbursed 40 k plus for losses PLUS an additional top up in his account.

http://www.pokernewsnation.com/poker...egreanu-hacked



quote from article

" Supposedly PokerStars will re-fund Negreanu’s account and hopefully KidPoker will make a triumphant comeback and try to accomplish Negreanu’s goal in 2012 of moving into first place on the list of all-time money leaders."

I shouldn't be surprised but I am that online in 2015 you can login from an IP that it doesn't know from a far away country and withdraw funds the same day without a "hey what the heck's going on here you sure about this?" confirmation via either e-mail or another non account method but probably nobody does that b/c they don't care.

Stars should be displaying a hell of a lot more nuance and reasonableness in their approach than they are exhibiting with their actions and posts.

The way they are acting like their hands are clean here is utter nonsense. If they decide to take the approach of letting a deposit show in a cashier ready for play (or CASHOUT????) before they have processed it in such a way that a charge back is not possible that should be 100% THEIR PROBLEM. They don't have to do this. They choose to do this because they think it makes them the most money and they should assume all the risk for doing it. And oh, haven't they heard of FTP circa 2011? Perhaps this isn't a good idea? Charge backs don't have to exist on Stars but they choose to allow this problem to exist for the sake of profit. That's a calculation they can make but shouldn't be the problem of a victim of a hack.

It is also astonishing how they fail to make some very logical and simple security improvements that would prevent the majority of hacks. There is nothing that advanced about having extra verification required when signing on from a new location and yet they can't even make that an option? So when a player logs in 100x in a row from London and then 10 minutes after his most recent log in from London he logs in from Moscow, deposits with a new credit card, dumps some money, and cashes out, Stars will claim they are not responsible? Are you kidding me? They have all the required information to, if nothing else, immediately freeze the account until receiving some kind of extra verification of what is going on.

This is really disturbing and given how important it is to their business that customers feel secure with their money on the site it is really surprising how limited their liability goes. Banks back people 100% for loss in the result of hacks. Credit cards back people 100% in the event of theft. Pokerstars is their for people 0% in the event of hack. I'm not saying they should be there 100% in the same way as a bank, but they should be coming from a place of being as helpful and reasonable as possible, not of 'our terms say we take no responsibility so, bye.'

I hope they consider improving both their security and their response to hacks so players can trust them more with their funds.

I thought my thread was more succinct, lol.

It does not matter what is said at this point. Clearly anything will be said to look good or deflect fault. At a point you have to see something for what it is. A business billions of dollars in debt. They tried crazy rake increases the software has tons of flaws, the servers seem to of been downgraded, and now this. Daniel Negreaneau was hacked a few years ago. Did he have to pay? Was he reimbursed? 40k lost plus given it back. Is Daniel N not responsible for keeping his password secure but we are? Do TOS not apply to the face of Stars. Other high stakes players hacked also. What is the difference here? Am I missing something?

http://www.pokernews.com/news/2013/0...mput-16065.htm


http://www.pokernewsnation.com/poker...egreanu-hacked

The top one is different, it says people were able to see his whole cards. I have never heard of this, I never knew it was possible. It would be nice to have this widely known and what to look for to prevent in the future which is why it is important to know wtf is going on here and ps is being as evasive and unhelpful as possible. Surely there is some higher authority to investigate this on our behalf. What other info do they have, god only knows and if it will be used in the future other ways. I have no faith in ps figuring this out, they clearly don't give a crap. Only to the very least extent it makes them look like they do.

Both articles do not say whether the money was cashed out already and Negreanu's article even includes the word "supposedly".

I brought this up in the other thread as well, and just like here, nobody responded. Really think we might be on to something! An affiliate has all this information (how active is the Stars account) that seemed to have been helping the hacker with choosing what 'less visible' accounts to hack.

Remember when Stars dumped a bunch of affiliates? Hacker is angry ex-affiliate?

Hacker-affiliate bought info from somebody on the inside? All kinds of scenarios are possible, but it could very well be the link between the hacked accounts (can't be random? Because if it was random, people with big bankrolls would have been hacked as well?).

So once again, a relevant question for all hacked persons might be; did you sign up through an affiliate, and if so, which one?

Also, somebody mentioned he was a 'ghost' in the pokerscene, because he hasn't played in forever. Well, an affiliate won't have to go through all kinds of trouble to search for such accounts. The info is right there

Been following this and the first thread.

Just logged in and was given the option of adding two security questions to further enhance security on my account.

Assume this will happen to everyone else.

100% spot on imo.

So the problem in the reimbursement case is article 10.4 of the T&C:

In my jurisdiction I doubt a judge would find this lawful. It's arguable - like many posters itt do, and something which feels just also - that when you provide a security around a gamblingservice with a money depositservice, for which you charge through rake, you are held accountable when there's a breach in the security. Sure, when a person shares his password with a stranger, PokerStars' responsibility is close to 0%. But when PokerStars knows that a login is made from another country - for which they send you an e-mail - and several cashouts are being made immediately, responsibility is much bigger. To quote insidemanpoker: to just say 'our terms say we take no responsibility so, bye.' is not appropriate. Who knows, maybe a Maltese lawyer is a vivid 2+2-lurker and willing to assist?

Pokerstars UK is now governed by the gambling commission.

http://www.gamblingcommission.gov.uk/Home.aspx

In the other thread I asked Josem whether the following could happen:

- Account accessed from a brand new location / country
- Deposits made from 2 brand new sources unrelated to my name / address
- cashouts made to one of these new sources the same day

His reply was "yes, unless you have an RSA token"

I'm not satisfied with that response, so I'm writing one of my patented #stronglywordedletters to support today in which I'll outline my concerns in better detail. I suggest others do the same, at least until / unless a stars rep posts a more satisfactory response itt.

at least PS could add an option to lock account to ip/location/device