| Author |
 Replies: 13 / Views: 1,516 |
|
|
Pillar of the Community
United States
2365 Posts |
We just received a letter from JM Bullion that their Provident Metals subsidiary was hacked. The letter states that they believe the "security incident" happened sometime between January and July 2020. I don't know why they're just telling us about it now but, it seems like the hack was recently discovered or settled in Court. This letter only went out to folks that have bought from them. Moderators: I wasn't sure where to post this notice, if at all but, I thought folks might want to know. |
|
|
|
Moderator
 United States
164334 Posts |
Quote:
I wasn't sure where to post this notice, if at all but, I thought folks might want to know. No problem! I moved it to a more appropriate spot. 
|
|
Pillar of the Community
 United States
2365 Posts |
Ahhhhh...thanks jbuck. Bear with me until I get re-acquainted with the site again. There's so much on the site now that this ole gal gets confused!  |
|
Moderator
United States
164334 Posts |
Hang in there! I think you are doing fine. |
|
Bedrock of the Community
 United States
12387 Posts |
Interesting. By "letter" do you mean snail mail? I received no such letter in either digital or analog format. But it appears my last purchase from JMB was back in November of 2019, before the silver premiums went through the roof. However, my data is definitely in their computers currently and was back then as well.  |
|
Pillar of the Community
United States
1870 Posts |
I've bought from JM Bullion site but not Provident. A while back I started using mostly Paypal. It costs more, about 4%. I'm redirected to PayPal to make the purchase. JM Bullion and other online coin dealers do not have my bank/card info. I try to avoid having online companies know my bank/card info, at least keep this to a minimum. The 4% extra adds up, but to me it's worth it. I hope/assume PayPal has more robust security. About a year ago I bought a gun part on Ruger store for my 22 rifle. They didn't use PayPal so I used my bank card. It was hacked. I got an email from Ruger. They paid 1 year free subscription to a cyber security company that has insurance for any losses I might have. Nothing so far. My brother is the head of technology for a university. He says there are hundreds of attempts every week from all over the world with hackers trying to break into the college database to get info on staff, students, financial info. It's wise to have anti virus protection on your home computers!! Edited by livingwater
01/19/2023 07:22 am
|
|
Pillar of the Community
United States
2365 Posts |
Quote:
Interesting. By "letter" do you mean snail mail? I received no such letter in either digital or analog format. CelticKnot: It was by USPS delivery. Also, with our "hobby" we all should definitely have some sort of "virus protection". I never ever leave/store my CC info on any website. I use it for single purchase and then I'm out. It probably isn't safe that way either but, I feel safer.  I'm a retired Federal Employee and all of our records were hacked/hijacked a few years ago. They signed all of us up for Fraud Alert and protection - whatever it's called. No problems yet but, who knows if/when that will happen.
|
|
Pillar of the Community
United States
4660 Posts |
Well I did not receive any letter from Provident Metals.
|
|
Moderator
United States
54172 Posts |
Can you post the content of the letter, please?
Show your financial support of the Coin Community Family (click here)See my topic on Mexican Numismatic Medals (click here) |
|
Pillar of the Community
United States
2365 Posts |
JMbucks Quote:
Well I did not receive any letter from Provident Metals. The letter came from JM Bullion. I will try to post it. |
|
Pillar of the Community
United States
1870 Posts |
For what it's worth, as I said earlier my brother works for a university, head of technology. I asked him about using a card for purchase then deleting it. He said that would clear the info from the main computers of a business which would be safer if hacked. But the card info may be stored on the business backup servers and files used if their main system goes down. The backup servers are supposed to be harder to find and hack according to him.
Edited by livingwater
01/20/2023 11:39 am
|
|
Pillar of the Community
United States
2365 Posts |
Thanks livingwater! I guess I might be a bit safer to remove the CC.
|
|
Pillar of the Community
United States
4381 Posts |
Understand that anybody who processes credit card information is supposed to implement the Payment Card Industry standards for handling it. The payment processor is supposed to verify this.
BUT
What happens is you don't get cut off, you just get charged higher fees (to cover the risk). Which still leaves the card info "out there".
-----Burton 50 year / Life / Emeritus ANA member (joined 12/1/1973) Life member: Numismatics International, CONECA Member: TNA, FtWCC, NETCC, OnLine Coin Club Owned by four cats and a wife of 40 years (joined 1983) |
|
Bedrock of the Community
United States
12387 Posts |
With the move to digital payments, online banking, banking apps, etc, there isn't a way to live these days without someone (many someones in fact) having your financial information. The very nature of the Payment Card Industry (PCI) is other folks having your information. It doesn't matter if it's PayPal or Chase or Citi or Target or JMBullion or Venmo or whatever -- your info is out there and is at risk of being hacked. Modern times. Business that work with PCI data are required to follow strict security regulations and are audited regularly. But that doesn't mean there can't be a breach. Rather than a large-scale data theft, it's more likely that your individual information will be compromised by way of phishing, social engineering, physical card theft/loss, skimmers, etc. It always pays to keep an eye on your statements and report any suspicious activity to your bank. If it is fraudulent they will help you with it. Removing a payment card from a web site only removes it as an option for payment for you. It's still out there in databases and backups, as mentioned above. Edited by CelticKnot
01/20/2023 7:37 pm
|
| |
Replies: 13 / Views: 1,516 |
|
Posted 01/18/2023 5:00 pm
