Fasthosts hacked: change your password!

[tbp]

Tweet

I think that pretty much confirms what I said yesterday about card details being stored in clear text. Can't believe they are still doing that!

With the way their system works if someone has access to the account details they will also have had the card data, as its stored in the same place.

[ChrisM]

Just got home from a week away to an answerphone message from the bank - my details have been stolen by fraudsters and they've closed my account and opened a new one for me. All transactions from the last 2 weeks refunded - including the genuine ones apparently. Well done HSBC.

I can only assume this is due to Fasthosts coz its the same card i use for them.

[Standup Media]

Just got home from a week away to an answerphone message from the bank - my details have been stolen by fraudsters and they've closed my account and opened a new one for me. All transactions from the last 2 weeks refunded - including the genuine ones apparently. Well done HSBC.

I can only assume this is due to Fasthosts coz its the same card i use for them.

I wonder what would have happened if you paid for a brand new car and paid in full.

[Dynamoo]

Just got home from a week away to an answerphone message from the bank - my details have been stolen by fraudsters and they've closed my account and opened a new one for me. All transactions from the last 2 weeks refunded - including the genuine ones apparently. Well done HSBC.

I can only assume this is due to Fasthosts coz its the same card i use for them.

Well, that answers that question.. they did get away with credit card details.

To be blunt - Fasthosts are a scummy provider in any case. They are rather too tolerant of spammy customers and have no end of problems - check out what The Register has reported about them. Looks like it's not the first time they've had CC details stolen it seems.

[tbp]

Yup, thats the 3rd person (including myself) thats had card details used fraudulently, and who also used the card on fasthosts, I wonder how many more there are that we don't know about!

Fasthosts have improved their security, but now its over the top! Takes me about 8 or 9 attempts to get into my account now as I can't read the captcha letters (very little difference between lower and upper case with some letters)

Also had problems with the last 2 domains i`ve registered, one this week, one last week, registering on FH but not on nominet. Had to ring them up and get them done manually.

Its a shame as their tech support has actually been really good when I have rung, answered the phone quickly and sorted my problems quickly. I also do like their control panel (when it works!).

I must admit though, i`ve always used them, so I don't know who else to use now, recommendations would be welcome. Need to have a really good control panel, that allows you to do more advanced stuff, as I run my own name servers.

Also going to be a pain to transfer my domains, as I have around 90 with them now.

[rshosting]

there are plenty of reliable and secure host out there.

Just google the site check reviews and then choice your host.

[tbp]

there are plenty of reliable and secure host out there.

Just google the site check reviews and then choice your host

Yes, I do have a host though which Im really happy with. I wouldn't touch fasthosts with a bargepole for hosting!

I was talking about UK Reg, their domain section, which actually has a really good control panel. Did used to be a member of Nominet, but don't have enough domains now to make it worthwhile forking out the yearly fee.

[ChrisM]

I wonder what would have happened if you paid for a brand new car and paid in full.

They did go through the transactions with me before they told me what was wrong - I'd guess if i'd bought anything expensive it may be different but my guess is its a damage limitation exercise on the bank's part to refund.

[ChrisM]

I wouldn't touch fasthosts with a bargepole for hosting!

I wont be moving from fasthosts - this could happen with any company - I dont know who is most secure and who isnt, and i'm also a believer that if hackers want to get in they usually do anyway.

Thats not to say i'm impressed with this incident but in my view its whether they succeed in stopping it occurring again thats the issue now.

[ian-d]

I agree with you on the point that your details are never safe, but hacking into a server is one thing, going into another realm of security for card details is another, but it seems this part has not been protected by fasthosts and they've been holding details in excel etc.

I think me a tbp discussed the fact that is there any point moving away from fasthosts/ukreg other than on principle, as i'm sure they'll be more protective now, plus i'm sure they'll be getting slapped by the high tech crimes unit for it.

As an update, i'm still 1 week off finding out when i can have my money back, so thats now coming up to 6 weeks. I'm with HSBC, but despite having 3D secure on my card, and informing them within 2 days (weekend) they still weren't able to refund me which is dissapointing, albeit not their fault!

I tried speaking to Gloucestershire police about my suspicions, yet they didn't want to know, i tried speaking/reporting to the high tech crimes unit, but it appears they don't speak to victims anymore, all i was advised to do was tell my bank, who don't care!

If i wanted to take this further and really put some heat on fasthosts, anyone have any thoughts on a way of going about it...legally

[tbp]

I tried speaking to Gloucestershire police about my suspicions, yet they didn't want to know, i tried speaking/reporting to the high tech crimes unit, but it appears they don't speak to victims anymore, all i was advised to do was tell my bank, who don't care!

This is what really annoys me. Card fraud is massively increasing, people are getting ripped off right, left and centre, and yet none of the authorities seem to care.

The police don't want to know, the fraud squad don't want to know, and the banks don't want to know!

The only exception is if huge amounts of money are stolen. Its really annoys me as its the merchants who lose out, not only is unfair on them, it puts the prices up for everyone else.

Its not suprising there is so much card fraud, you steal a number of credit card numbers, make 1 or 2 transactions per card, and no one cares, no one is going to come after you, you don't have to get your hands dirty, or even leave your home. You can have goods bought with the stolen card delivered to your home - and still be safe in the knowledge that you aren't going to get into trouble.

I really hate this country, the government are systematically destroying it. The police are busy arresting kids for writing on walls with a twix, but stealing thousands of pounds from peoples cards is fine!

[ian-d]

Just incase anyone has been following this thread, i got my money back today which is great. Feel sorry for the merchant in a way (been there, done that) as they loose out, but equally so i have security measures on my card to prevent fruad, yet they choose not to have any rulebases in place, not even AVS, and on that kind of value, more fool them!

Not going to let things lie though, if my money was used fraudulently from the fasthosts hackers finding a lovely excel sheet full of card details, i'll be taking further...just don't know who to talk to, no 'authority' gives a toss about internet fraud grrrr

[tbp]

Congratulations!

Glad you got money back, although its taken the bank a while!

I think its going to be difficult to prove with Fasthosts, you are going to need someone on the inside to verify that they were holding the details unencrypted, and thats not going to happen as i`m sure it would be instant dismissal for them.