Sterling Auctions Site Up *DO NOT BID at this time*

[UKCardGuy]

I'll be very interested to see the analysis of the vector of attack used by the hackers, which auctions sites were affected and what types of personal data was potentially exposed.

Hopefully Bob will provide clarity about what happened and which sites were affected.

Whether the hackers use thst information, or not, is immaterial. Customers should have the opportunity to manage their risks from the attack.

Personally, I can't condone paying the ransom. If someone steals the keys to my front door, I'm not going to pay them to get the keys back. I'm going to call the locksmith and move on.

If a appropriate backups existed, then there should have been no need to pay any ransom. I'll be reconsidering my patronage of any AH using SimpleAuctionSite as a result.

[Stampsfan]

I too am in IT. I’ve said this before on this board. If I do the forget my password thing, I’ve had emails sent to me with my password in it. Not the way it’s supposed to be handled and I get very leery about that auction house and cloud provider when that happens.

[Tabe]

Originally Posted by UKCardGuy

I'll be very interested to see the analysis of the vector of attack used by the hackers, which auctions sites were affected and what types of personal data was potentially exposed.

Hopefully Bob will provide clarity about what happened and which sites were affected.

Whether the hackers use thst information, or not, is immaterial. Customers should have the opportunity to manage their risks from the attack.

Personally, I can't condone paying the ransom. If someone steals the keys to my front door, I'm not going to pay them to get the keys back. I'm going to call the locksmith and move on.

If a appropriate backups existed, then there should have been no need to pay any ransom. I'll be reconsidering my patronage of any AH using SimpleAuctionSite as a result.

Theoretically, all the hackers should be able to get from an auction site would be your contact info and purchase history. Your credit card and password info SHOULD be stored in encrypted format. If it's not, the auction host should be put out of business. Period.

As for restoring from backups, it's not always that simple. Yes, you would hope you can restore from a clean backup but that's not always possible.

[iwantitiwinit]

Anyone hearing an update on the timing of auction open?

[philo98]

Originally Posted by iwantitiwinit

Anyone hearing an update on the timing of auction open?

Ive received a number of emails from different AH who have delayed opening from yesterday afternoon until it appears Wednesday now.

[Exhibitman]

Originally Posted by iwantitiwinit

Anyone hearing an update on the timing of auction open?

Monday

[Sterling Sports Auctions]

The latest update is Wednesday for the sites that have auctions running, and the rest follow after they are up. Not sure how long it will all take but that is what information we are getting.

Lee

[NATCARD]

Simple Auction runs my site as well. I had an auction end last Wednesday and the site went down Friday. I was able to email all of my invoices to all winning bidders before it went down. I sent out direct emails to each winning bidder that had not paid to to let them know what was going on. I had to type in their emails from their printed invoices. Now if they choose they can pay by check as the ability to pay through PayPal is down with the site down. All of the customer information as far as I know (name, address, email, phone) is stored on a separate I Contact account. I am patiently waiting for my site and auction site to come back up. Jeff Weisenberg

[Mark17]

Originally Posted by NATCARD

Simple Auction runs my site as well. I had an auction end last Wednesday and the site went down Friday. I was able to email all of my invoices to all winning bidders before it went down. I sent out direct emails to each winning bidder that had not paid to to let them know what was going on. I had to type in their emails from their printed invoices. Now if they choose they can pay by check as the ability to pay through PayPal is down with the site down. All of the customer information as far as I know (name, address, email, phone) is stored on a separate I Contact account. I am patiently waiting for my site and auction site to come back up. Jeff Weisenberg

Jeff, thanks for the info. When a dealer bids in your auctions and is eligible to forego paying sales tax, how do you handle their request for a sales tax exemption? Specifically, do you request their SSN, and is that info stored on the servers that were hit, or, would the application with SSN have been emailed back to you on an email account that was hit?

[birdman42]

Originally Posted by UKCardGuy

Personally, I can't condone paying the ransom. If someone steals the keys to my front door, I'm not going to pay them to get the keys back. I'm going to call the locksmith and move on.

That's not the right analogy. It's more like the hackers called the locksmith and changed the locks, and they have the only key to your house.

Bill

[chriskim]

those hacker normally demand $50k bitcoin as far as I know.