Sterling Auctions Site Up *DO NOT BID at this time*

[Shoeless Moe]

Originally Posted by Baseball Rarities

They have made contact with the hackers, and have paid the initial ransom. We are awaiting the hackers' reply to unencrypt their servers. Once they give us the key to unencrypt the data, we will start the process which could take anywhere from a few hours to a few days.

As always, we appreciate your patience and understanding as we go through this difficult time.

Best Regards,

Bob Freedman
CEO, Simple Auction Site

C'mon Bob don't pay the ransom! Go out and get Liam Neeson & Harrison Ford, they'll deal with the hackers the right way.

[todeen]

Originally Posted by Shoeless Moe

C'mon Bob don't pay the ransom! Go out and get Liam Neeson & Harrison Ford, they'll deal with the hackers the right way.

One of the top posts of 2020!

Sent from my SAMSUNG-SM-G930A using Tapatalk

[Mark17]

This affects a lot of AH I deal with, so I'm wondering what personal info was exposed if any, like payment method info.

[Aquarian Sports Cards]

Since they've taken control of Simple's servers I think it would be smart to assume data has been compromised.

[sb1]

There is little personal data at risk for most of AH's affected.

When you register, you provide your name, address, email and phone. No financial info or any kind(credit card or bank account info) nor SS #.

AH's taking Paypal and Credit cards might have another issue, if they have data on their server, more likely it's on the payment processors side and quite secure.

I think the jist here was to hold Simple hostage and not gain benefit from the users info, otherwise they would have stayed quiet and milked the data for a long time.

[Aquarian Sports Cards]

I understand what you're saying Scott, my point was to err on the side of caution, not that anything definitively happened.

[Throttlesteer]

MeiGray is part of this as well.

Additionally, if user IDs are tied to their personal information and large purchases, this could help further identify "high value" targets. Don't cast off PII so easily.

[drcy]

I think Scott's assessment makes sense. If they were stealing personal financial information, they wouldn't say anything. They would try to be completely covert about that.

Originally Posted by sb1

There is little personal data at risk for most of AH's affected.

When you register, you provide your name, address, email and phone. No financial info or any kind(credit card or bank account info) nor SS #.

AH's taking Paypal and Credit cards might have another issue, if they have data on their server, more likely it's on the payment processors side and quite secure.

I think the jist here was to hold Simple hostage and not gain benefit from the users info, otherwise they would have stayed quiet and milked the data for a long time.

[Golfguy]

Well if it's ransomware it means someone has control of their servers. That means they have control of ALL info. So if they keep credit card info on file, it's in there. I don't believe they encrypt passwords, so there's that too. If you use the same passwords for important things such as credit cards, banking, etc., you might want to make some changes. I know some are joking on this thread, but this is serious. ALL of SA customers (auction houses) have been compromised.

[Aquarian Sports Cards]

Originally Posted by drcy

I think Scott's assessment makes sense. If they were stealing personal financial information, they wouldn't say anything. They would try to be completely covert about that.

Except that most of the time the guys who steal the info aren't stealing it to use it but rather to sell it.