Slitherine

quote:

ORIGINAL: rico21

It's really sad to be robbed twice, once buying the game, a second time for buying it.

quote:


If anybody is inclined to post REAL information to threads like the one on Matrix, here's the summary of where we're at:

1. A tiny fraction of customers who placed orders in the past 2 months have chimed in here to say their credit cards had fraudulent charges placed in the beginning of January. This includes my own card which, one would be correct to assume, was never used to purchase anything from Battlefront.com. Which means some sort of group compromise happened AND that it includes people that have not placed an order with Battlefront.com.

2. Battlefront never has, and never will, collect customer credit card information. Instead, credit card information goes direct from a customer's browser to our payment processor (PayPal/PayFlow). All Battlefront gets is a report from the processor which gives the transaction a thumbs up or thumbs down along with some transaction codes. Since someone can't steal what we don't have, there's absolutely no chance in a billion years that credit card information was taken from our server.

3. While it is theoretically possible to hack our website and change the order processing script to have the customer's browser hijack credit card info, this has already been checked by our webstore host and there have been no changes to our scripts. They checked twice, in fact, because I asked them to.

4. If anybody thinks they are immune from massive data breaches like these, think again. It must be remembered that nearly a billion online accounts were documented to have been breached in 2018. Most of us have had a credit or bank card compromised more than once (I had an ATM card physically skimmed, including PIN). Even those who think they haven't had a card compromised have probably received a replacement credit card out of the blue. That means the card company thinks your card has likely been compromised and is proactively replacing it.

5. Some think that the tiny fraction of customers who had a credit card compromised AND placed an order for CMSF2 couldn't be a coincidence. Which is wrong on so many levels. First, most of the people reporting in say they bought a CMSF2 product, which isn't surprising since that's the biggest selling group of products in the time period covered. Obvious coincidence. Second, my credit card was also hit with fraud charges at the very same time in a very similar way as the others noted here, but I've never used it to purchase items from Battlefront.com. Obvious coincidence. Third, timing of a specific purchase and a fraud charge inherently means nothing because a card used years ago, and stored somewhere, is just as vulnerable as a card used 5 seconds ago. Trying to tie a specific transaction to a specific breach is, therefore, not straight forward and is prone to being coincidental. Fact is, Humans are thoroughly documented to be very poor evaluators of cause/effect and extremely prone to incorrectly finding meaning in something that has none. Be it religion, "lucky" lottery numbers, bad things happen after a black cat crosses ones' path, two people in a room of 30 having the same birthday is noteworthy, etc.

With that said, because the world is a very complex and nasty place when it comes to cyber security, I can not 100% rule out someone somehow got a hold of a tiny slice of customer payment data one time for a limited time. Nor can I rule out winning the lottery if I pick up a discarded ticket on the sidewalk. Which is why I will always check into the possibility of a customer breach just as I will always pick up a discarded lottery ticket.

Steve

quote:

I am getting very frustrated that BluePoint and Matrix do not seem to be taking the of CC data security very seriously.

quote:

ORIGINAL: JamesHunt
if you check the OP´s post history he is extremely busy with taking a dump on everything Combat Mission

quote:

ORIGINAL: 76mm

Well, while we're on the topic of credit card fraud, Matrix's payment service provider (BluePoint) stores my credit card info every time I make a purchase at Matrix, even though I ask them not to. Having Bluepoint store my CC info makes it that much more likely that someone could steal it from there. I have raised this point with both BluePoint and Matrix several times now, but as of the last time I ordered, lo and behold BluePoint had stored my CC info once again. I am getting very frustrated that BluePoint and Matrix do not seem to be taking the of CC data security very seriously.

quote:

ORIGINAL: RichG

quote:

ORIGINAL: JamesHunt
if you check the OP´s post history he is extremely busy with taking a dump on everything Combat Mission

James, having looked through my post history you will see I have three mentions of Battlefronts broken V4 update and the length of time it is taking to get a fix. This is hardly "extremely busy with taking a dump on everything CM". In fact, i have in the past highly praised Battlefront and the CM games, and I should add, I want to see them succeed.

You will also have seen that I have been critical of Matrix own security in relation to this very website. This is hardly partisan behavior. Highlighting potential security/privacy/fraud risks should be encouraged. We put up with far too much bad practice in general on the internet and that is only to the advantage of those scumbags who wish to profit from such weaknesses.

quote:

ORIGINAL: z1812

All anyone has to do is check your post history to see for themselves what the tone of your posts are concerning Battlefront.

quote:

Battlefront were saying that 18 months ago.

quote:

Hopefully this means they can set about fixing the bugs in the version 4 updates of the other CM2 games which have made them pretty much unplayable for the last two years. Although I won't hold my breath.

quote:

And wait two years or more to get a fix when they release broken paid for updates which ruin the game.

quote:

ORIGINAL: Yogi the Great
I agree, however I believe you are given the choice the first time you order (with new card) as with many vendors. The problem is that there is a box that has to be checked for this and the default is that the box is checked which means you would have to notice that and uncheck the box. Pain in the rear as sooner or later when placing an order you can easily forget to "uncheck" the box.

quote:

ORIGINAL: Fleischer80

I read that thread on the Battlefront forums a week ago, but stupidly decided to buy their latest WW2 game anyway. Just got a call from the card company now. Luckily, the attempt was unsuccessful as it was caught by their anti-fraud systems. I do need to get another debit card though, which is quite irritating.

I say stupidly, because Battlefront has a reputation of not acknowledging problems or issues with their games and company. And I knew that because I used to spend quite a bit of my time posting bug reports on their forum many years ago, and every time it was met with deaf ears. The typical reply was that the mistake was on my part and that nothing was wrong with their game. "You just don't know how to play it!". Not acknowledging problems seems to be the modus operandi on that forum today as well.

Battlefront-Steve has now shut down that thread and refuses to acknowledge that this is happening. This despite dozens of people coming in there and reporting credit card fraud, and in some cases with cards that have only been used on Battlefront's store. His argument is that credit card fraud happens all the time, and that people flooding his forum with stories of hacked cards is simply to be expected anyway. In other words, no amount of Battlefront customers with hacked cards is going to prove this guy wrong!

Stay away from them. Don't buy from Battlefront until they have fixed this leak. Like RichG says, their current game engine is very bugridden anyway, and hasn't been patched in years.

quote:

ORIGINAL: zakblood

i don't like the knocking of companies from elsewhere, where they can't reply etc, for me the thread needs to go either back there or locked and not carried on, i have no issues with them tbh.