Welcome to WebmasterWorld Guest from

Forum Moderators: LifeinAsia

Message Too Old, No Replies

Possible competitor hack

...maybe we've been hacked

4:58 pm on Nov 30, 2004 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 10, 2003
votes: 4

A customer received a phone call from somebody purporting to be from our company claiming that they could have saved the customer 20 on their purchase. I know it wasn't from anybody at the company so it must have been from a competitor.

The customer ordered via email. How could a competitor get hold of our emails? We have checked our servers and are sure that it hasn't been hacked (though we are going to check again).

Anybody seen anything like this before?

1:31 pm on Dec 3, 2004 (gmt 0)

Moderator from AU 

WebmasterWorld Administrator anallawalla is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 3, 2003
votes: 21

Could have been a simpler explanation - could this hoaxer (or an associate) have visited the customer for some other reason and noticed the purchase or was told about it?


2:01 pm on Dec 3, 2004 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Aug 13, 2003
votes: 3

Anybody seen anything like this before?

Yes. The call would probably end along the lines of: "We can offer you the 20 refund, but we need your credit card number"

They get the customer details from binned receipts (don't put phone numbers of customers on there), cached copies of pages on public computers (disallow checkout page caching and only pass variable with the 'get' method) or from actually hacking in to computer systems. The last one is the harder option - probably one of the other methods has been used.

You should confirm with the customer that he has not given his card numbers to anyone.

The only other alternative is a competitor is attempting to undermine your business reputation.