Arbiter Data Breach

[crosscountry55]

Anyone else get the Arbiter data breach notification today? I changed my password and signed up for the offered Experian monitoring.

I recall past discussions about Arbiter’s security vulnerabilities and lax encryption. It would seem the chickens have come home to roost.

If Arbiter was concerned about emerging competition before, that concern must now be quadrupled. It’s not a good time for the boys in Sandy, UT.


Sent from my iPhone using Tapatalk

[justaref61]

I received the email also but have been skeptical of its authenticity because of the wording about the involvement of "my child's information". I just haven't taken the time to call or email Arbiter. Here is the first paragraph of the email:
ArbiterSports is committed to protecting the confidentiality of our customers’ information. We are writing to notify you that we recently identified and addressed a data security incident that involved some of your child’s information. This notice provides you with a description of the incident, our response, and the steps you may take.

[LRZ]

I got the email yesterday, but mine reads "a data security incident that involved some of your information." My guess is the "child's" was just an error by the author of the email, corrected when discovered. But until I'm sure of the email's authenticity, I am not going to share my SSN.

[crosscountry55]

Well, I’m pretty discerning, and what I received yesterday did not have any of the classic attributes of a hoax. If it was a hoax, it is by far the most sophisticated I have ever seen.

I’m very confident that what I received yesterday was not the product of a Nigerian prince.


Sent from my iPhone using Tapatalk

[justacoach]

Originally Posted by crosscountry55

Well, I’m pretty discerning, and what I received yesterday did not have any of the classic attributes of a hoax. If it was a hoax, it is by far the most sophisticated I have ever seen.

I’m very confident that what I received yesterday was not the product of a Nigerian prince.


Sent from my iPhone using Tapatalk

And, it was sent to several unique email addresses that were only ever used on their site....

[sdoebler]

It really bothered me that they knew about the data breach in mid July and took almost a month and a half to inform people. Very frustrating

[BillyMac]

I received a USPS "snail mail" from Arbiter today regarding this subject.

Usernames, passwords, names, addresses, birth dates, email addresses, and Social Security numbers were all compromised.

Arbiter paid the hacker's ransom demand to delete the stolen files.

Arbiter suggests that we change our passwords and offered two years of free Experian Identity Works Credit 3B to protect our identities.

[gamefaceref]

Originally Posted by BillyMac

I received a USPS "snail mail" from Arbiter today regarding this subject.

Usernames, passwords, names, addresses, birth dates, email addresses, and Social Security numbers were all compromised.

Arbiter paid the hacker's ransom demand to delete the stolen files.

Arbiter suggests that we change our passwords and offered two years of free Experian Identity Works Credit 3B to protect our identities.

My letter says 1 year Experian membership....no an acceptable resolution in my opinion. Should be at least three years, but if you are getting two years for some reason than that reveals other issues that need to be addressed. With all the information they got what is to say that they did not also get our banking information that is on there for payments?

[Zoochy]

Originally Posted by BillyMac

I received a USPS "snail mail" from Arbiter today regarding this subject.

Usernames, passwords, names, addresses, birth dates, email addresses, and Social Security numbers were all compromised.

Arbiter paid the hacker's ransom demand to delete the stolen files.

Arbiter suggests that we change our passwords and offered two years of free Experian Identity Works Credit 3B to protect our identities.

I got the same as BillyMac.

Aren't you a detective? Or was just back in 1976?

[Stat-Man]

Last month, my Arbiter session for my phone had expired. I had trouble logging back and had to use my desktop session to reset my password. I now wonder if my login issue was related to the breach.

Originally Posted by sdoebler

It really bothered me that they knew about the data breach in mid July and took almost a month and a half to inform people. Very frustrating

It's possible that there was an investigation into the breach and that Arbiter LLC had to wait for that to reach the point where they could disclose something definitive about what happened.

At least they notified users. Years ago, Honig's apparently had a breach of their online store data and didn't bother notifying customers. I only found out by chance when I read something online that that a state's attorney general either sued or threaten to sue them over their failure to notify customers from their state. I strongly suspect my card at the time was one of the ones compromised because I bought something from their online store around that time and my card was compromised the next day.

[BillyMac]

Originally Posted by Stat-Man

Last month, my Arbiter session for my phone had expired. I had trouble logging back and had to use my desktop session to reset my password.

Same here, I had to reset my password.