|
INTERNET TIPS
Compromised credit card info?
Try this test. Go to search engine Google (google.com), enter your credit card number (no spaces), then click the Google Search button. Hopefully, your hunt will yield zero results. But if you're one of the unlucky ones, you'll be viewing your name, credit card number, expiration date, billing address, order details, and, in a worse case scenario, your social security number.
There have been recent news articles exposing this problem caused not by intentional actions, but by simple oversight. This situation, however, is easily exploited by thieves and they don't even have to know your exact credit card number. To demonstrate, try this:
In the search box, enter the first four digits of your credit card, followed by 12 zeroes, followed by a period, then another period, then the first four credit card digits, followed by 12 nines. It should read something like this:
4324000000000000..4324999999999999
In essence, you're requesting from Google all credit card information starting with the numbers 4324. Your search will likely produce some customer names, their credit card data, and other personal information. This simple technique is how no-goodniks are stealing credit info and, worse, identities. (This affects American Express and Discover account holders too. Merely adjust the number of zeroes and nines in the search expression.)
How did credit card info become so public? Here's one scenario that comes to mind: Sometimes, when placing an on-line order with a small business, your credit card isn't transacted in real-time. Instead, the data is captured to a file stored on a server and downloaded by the merchant at a later time. The orders are then processed in a batch and your credit card number is manually keyed into a physical or software terminal. However, for customer protection, the merchant must take steps to ensure the file is stored in a secured area of the server. They must also make sure search engines don't or can't find the file, a simple enough task. Unfortunately, not all "mom-and-pop" sites are aware of this and needlessly expose their customers to personal information theft.
Bear in the mind that you're safer when shopping at better-known sites such as Amazon.com, Sears.com, airlines, etc., and the news article stated their tests proved this to be true. The problem is more prevalent among Web sites operated by smaller, lesser known companies.
And, in all fairness, don't blame Google. Similar results can be produced by using other search engines.
If you're a victim of this privacy breach, call your card-issuer immediately, and, if it can be determined, contact the business with whom you've placed an order and let them know your credit card has been compromised. You may also want to contact the fraud division of any of the top credit bureaus: Equifax (800-525-6285), Experian (888-397-3742), or Trans Union (800-680-7289). Or visit Equifax's a Web site (equifax.com) and sign-up for their credit monitoring services.
(NOTE: The Momii Company, operators of this Zatoichi website, do not store any personal information on servers. Customer data is stored locally behind a hardware and software firewall. We also do not keep credit card information on file. It is normally shredded and/or burned.)
Reprinted from the Rafu Shimpo. Copyright©2004 Rafu Shimpo.
Past tips: Online dealing hunting Users miffed by mysterious credit card charges Is your credit card information compromised?
|