In case you use Elance...

[Dana_W]

I just got this email.


"Dear Dana_W,
We recently learned that certain Elance user information was accessed without authorization, including potentially yours. The data accessed was contact information -- specifically name, email address, telephone number, city location and Elance login information (passwords were protected with encryption). This incident did NOT involve any credit card, bank account, social security or tax ID numbers.
We have remedied the cause of the breach and are working with appropriate authorities. We have also implemented additional security measures and have strengthened password requirements to protect all of our users.
We sincerely regret any inconvenience or disruption this may cause.
If you have any unanswered questions and for ongoing information about this matter, please visit this page in our Trust & Safety center: Elance Security Alert | Elance
For information on re-setting your password, visit: Customer Support :: Why Has My Password Expired?
Thank you for your understanding,
Michael Culver
Vice President
Elance"

[JayXtreme]

Thanks Dana..

I don't check the e-mail I use to sign up for Elance...

J

[diggy20]

Yup, got that message too. Had to go in and change my password.

[howudoin]

As an added measure..............Now when you try to log in they will send you another email containing a link (which expires in 2 hours) to change your password. S it is mandatory to change your password..

Bhupinder

[Nahar]

Thanks for sharing this.

Their response to this seems professional though.

I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!

[EdKirby]

Here is another issue to take into account...

I have a very good friend that used eLance to outsource some Excel work. Thinking that the site was and should be secure she uploaded the spreadsheet to be worked on. It had names and addresses of people who had leases. No financial info was in the document, luckily.

Low and behold someone on the list happened to Google their name and found out that the spreadsheet had been posted on the internet in one of those sites where you can download and use spreadsheets, templates and such. No one knows how this person got the spreadsheet, and when my friend called eLance they didn't offer anything up nor did they seemed overly concerned that their security may have been breached. When my friend contacted the template company that had the spreadsheet listed they immediately took it down.

What gets me is that they didn't even sanitize the spreadsheet before listing it.

The customer in question called the lease company who in turn call my friend looking for an explanation. Needless to say that it wasn't a good day for my friend. Luckily she has a very good relationship with her client so all ended well. But, her credibility could have been shot.

I would be cautious using these sites if you plan on uploading anything to them.

Cheers,

[David Hooper]

Originally Posted by Nahar

Thanks for sharing this.

Their response to this seems professional though.

I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!

Try a password management tool like 1Password. Handles everything.

[Dana_W]

Originally Posted by Nahar

Thanks for sharing this.

Their response to this seems professional though.

I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!

I know what you mean - I can't tell you how often I've forgotten a password and had to jump through hoops to reset it.

[Raygun]

I have heard some similar things about elance resently. Thanks for the info. Hope you don't have any problems.

[Sean Donahoe]

Thanks Dana, I had not checked my ELance email today and saw this sat there.

Appreciate you bringing this to our attention considering. These things happen and considering how much money I put through there I am glad all the pertinent data was encrypted properly.

No I just have to wait for the deluge of viagra, watch and weight loss spam to arrive in that account as the buggers sell the data they snarfed.

All the best

Sean

[solotr]

Thank you for sharing this because I had them on my list of possible places to outsource a few things, but after reading this "The data accessed was contact information -- specifically name, email address, telephone number, city location", they are off my list.

A reverse telephone directory would give anyone with time on their hands an opportunity to show up on my doorstep. Guess it's back to being a hermit

[dnka]

I also got the email, I thought it was a phishing email.

[Jon Steel]

Great info - thanx

js

[Gabe77]

I got the same message, too. I haven't used elance really. I just signed up with them just in case the other freelancing site doesn't sit well with me.

[TheDebtEliminator]

Thanks for the heads-up

I received the same email message and so far have not acted.

Just nice to read about this and so I will get a new password today

[Barry Walls]

I got it too...think sent these out to most members.

[Dana_W]

Originally Posted by dnka

I also got the email, I thought it was a phishing email.

I was debating whether it's a phishing email and I certainly would recommend not clicking in the link on it and then entering one's name and password,.

But that holds true for all emails that I get from big companies - from paypal, from elance, from my bank. You should NEVER click on a link in those types of emails. It could be legit but it's just too risky. Go to the site - the paypal, elance, whatever - directly, by typing their name in your browser bar.

[Stevie B]

My personal Elance data was leaked and when I directly asked Elance what specifically they were doing about it, they wouldn't respond.

I've stopped using Elance now. The leak was bad enough but to not inform me of specifically what they were doing about it is worse.

I know of several others who've stopped using them too.

Steve

[Khushboo]

thanx alot for the information.

[Amenda Jessera]

Oh god, that is the worst thing man. However, I had an account there but not an active one. I always stick with GAF, because elance does not offer me more project