23 {{ upvoteCount | shortNum }}
23 {{ upvoteCount | shortNum }}

In case you use Elance...

by Dana_W
19 replies
I just got this email.


"Dear Dana_W,
We recently learned that certain Elance user information was accessed without authorization, including potentially yours. The data accessed was contact information -- specifically name, email address, telephone number, city location and Elance login information (passwords were protected with encryption). This incident did NOT involve any credit card, bank account, social security or tax ID numbers.
We have remedied the cause of the breach and are working with appropriate authorities. We have also implemented additional security measures and have strengthened password requirements to protect all of our users.
We sincerely regret any inconvenience or disruption this may cause.
If you have any unanswered questions and for ongoing information about this matter, please visit this page in our Trust & Safety center: Elance Security Alert | Elance
For information on re-setting your password, visit: Customer Support :: Why Has My Password Expired?
Thank you for your understanding,
Michael Culver
Vice President
Elance"
#case #elance
  • Profile picture of the author JayXtreme
    Thanks Dana..

    I don't check the e-mail I use to sign up for Elance...

    J
    Signature

    Bare Murkage.........

    {{ DiscussionBoard.errors[992974].message }}
  • Profile picture of the author diggy20
    Yup, got that message too. Had to go in and change my password.
    Signature
    SENuke too expensive? Create powerful automated web bots using UBot. Use discount code: BOTSALE before you buy.
    {{ DiscussionBoard.errors[992996].message }}
  • Profile picture of the author howudoin
    As an added measure..............Now when you try to log in they will send you another email containing a link (which expires in 2 hours) to change your password. S it is mandatory to change your password..

    Bhupinder
    {{ DiscussionBoard.errors[993008].message }}
  • Profile picture of the author Nahar
    Thanks for sharing this.

    Their response to this seems professional though.

    I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!
    {{ DiscussionBoard.errors[993104].message }}
    • Profile picture of the author EdKirby
      Here is another issue to take into account...

      I have a very good friend that used eLance to outsource some Excel work. Thinking that the site was and should be secure she uploaded the spreadsheet to be worked on. It had names and addresses of people who had leases. No financial info was in the document, luckily.

      Low and behold someone on the list happened to Google their name and found out that the spreadsheet had been posted on the internet in one of those sites where you can download and use spreadsheets, templates and such. No one knows how this person got the spreadsheet, and when my friend called eLance they didn't offer anything up nor did they seemed overly concerned that their security may have been breached. When my friend contacted the template company that had the spreadsheet listed they immediately took it down.

      What gets me is that they didn't even sanitize the spreadsheet before listing it.

      The customer in question called the lease company who in turn call my friend looking for an explanation. Needless to say that it wasn't a good day for my friend. Luckily she has a very good relationship with her client so all ended well. But, her credibility could have been shot.

      I would be cautious using these sites if you plan on uploading anything to them.

      Cheers,
      Signature

      Ed

      {{ DiscussionBoard.errors[993165].message }}
    • Profile picture of the author David Hooper
      Originally Posted by Nahar View Post

      Thanks for sharing this.

      Their response to this seems professional though.

      I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!
      Try a password management tool like 1Password. Handles everything.
      Signature
      25 Podcast Episode Templates - FREE
      {{ DiscussionBoard.errors[993242].message }}
    • Profile picture of the author Dana_W
      Originally Posted by Nahar View Post

      Thanks for sharing this.

      Their response to this seems professional though.

      I hate when they "strengthen password requirements"! I used to be able to access anything that belonged to me just using my brain. Now there is no way I can remember all the PINs, passwords, the names of my first pets and teachers, favorite music types, etc. just to access my bank account!
      I know what you mean - I can't tell you how often I've forgotten a password and had to jump through hoops to reset it.
      {{ DiscussionBoard.errors[994639].message }}
  • Profile picture of the author Raygun
    I have heard some similar things about elance resently. Thanks for the info. Hope you don't have any problems.
    Signature
    $25,000 Prizes===>>>
    http://clicknbank.com/jv-invite.php
    {{ DiscussionBoard.errors[994804].message }}
  • Profile picture of the author Sean Donahoe
    Thanks Dana, I had not checked my ELance email today and saw this sat there.

    Appreciate you bringing this to our attention considering. These things happen and considering how much money I put through there I am glad all the pertinent data was encrypted properly.

    No I just have to wait for the deluge of viagra, watch and weight loss spam to arrive in that account as the buggers sell the data they snarfed.

    All the best

    Sean
    {{ DiscussionBoard.errors[994819].message }}
  • Profile picture of the author solotr
    Thank you for sharing this because I had them on my list of possible places to outsource a few things, but after reading this "The data accessed was contact information -- specifically name, email address, telephone number, city location", they are off my list.

    A reverse telephone directory would give anyone with time on their hands an opportunity to show up on my doorstep. Guess it's back to being a hermit
    Signature

    "It is better to have a permanent income than to be fascinating" ~ Oscar Wilde

    {{ DiscussionBoard.errors[994900].message }}
  • Profile picture of the author dnka
    I also got the email, I thought it was a phishing email.
    {{ DiscussionBoard.errors[995045].message }}
    • Profile picture of the author Dana_W
      Originally Posted by dnka View Post

      I also got the email, I thought it was a phishing email.
      I was debating whether it's a phishing email and I certainly would recommend not clicking in the link on it and then entering one's name and password,.

      But that holds true for all emails that I get from big companies - from paypal, from elance, from my bank. You should NEVER click on a link in those types of emails. It could be legit but it's just too risky. Go to the site - the paypal, elance, whatever - directly, by typing their name in your browser bar.
      {{ DiscussionBoard.errors[996752].message }}
  • Profile picture of the author Jon Steel
    Great info - thanx

    js
    {{ DiscussionBoard.errors[995309].message }}
  • Profile picture of the author Gabe77
    I got the same message, too. I haven't used elance really. I just signed up with them just in case the other freelancing site doesn't sit well with me.
    {{ DiscussionBoard.errors[996616].message }}
  • Profile picture of the author TheDebtEliminator
    Thanks for the heads-up

    I received the same email message and so far have not acted.

    Just nice to read about this and so I will get a new password today
    Signature
    Freedom from Credit Debt for All in USA … Credit cards, medical bills, student loans, etc. .................... Plus your credit scores at the bureau can be raised when your debt relief is completed.

    This is available for individuals with more than 10-K of debt and only by phone to start your debt analysis ... PM Me Your Phone Number and best times to call.
    {{ DiscussionBoard.errors[996668].message }}
  • Profile picture of the author Barry Walls
    I got it too...think sent these out to most members.
    Signature

    {{ DiscussionBoard.errors[996678].message }}
  • Profile picture of the author Stevie B
    My personal Elance data was leaked and when I directly asked Elance what specifically they were doing about it, they wouldn't respond.

    I've stopped using Elance now. The leak was bad enough but to not inform me of specifically what they were doing about it is worse.

    I know of several others who've stopped using them too.

    Steve
    {{ DiscussionBoard.errors[1254685].message }}
  • Profile picture of the author Khushboo
    thanx alot for the information.
    {{ DiscussionBoard.errors[1257371].message }}
  • Profile picture of the author Amenda Jessera
    Oh god, that is the worst thing man. However, I had an account there but not an active one. I always stick with GAF, because elance does not offer me more project
    {{ DiscussionBoard.errors[1257389].message }}

Trending Topics