ALERT: Woothemes Credit Card Fraud

by realdude

Posted: 11 years ago 5 replies

INTERNET MARKETING

Please be aware that if you have had a recent transaction with Woo Themes your credit card may have been compromised. I have had seven fraudulent transactions on my account as a direct result of my purchase there. Woo Themes has also sent out an alert. Please be sure to check your accounts.

#alert #card #credit #fraud #woothemes

Dennis Millbrath 11 years ago

Thanks for the update, do you know how long the danger goes back?
- Thanks
{{ DiscussionBoard.errors[9176272].message }}
realdude 11 years ago

They mentioned three days but my purchase was on April 2nd and the fraud started on the 6th. Here is what they said:

Steps we’ve taken:

We contacted Sucuri who have conducted a code & security audit
We requested a full review by our host and payment gateway
We updated our SSL certificate
As a pre-cautionary measure we changed our payment gateway to a completely offsite payment method – being PayPal Express.

Sucuri discovered 3 modified files on our server pointing towards an attack. It can not be said this is the reason for any leaked credit card information, and investigations continue.
- [ 1 ] Thanks
{{ DiscussionBoard.errors[9176285].message }}
Dennis Millbrath 11 years ago

Okay great that is about the time I purchased from them. I will have to check my records. Thanks for the info.
- Thanks
- 1 reply
{{ DiscussionBoard.errors[9176320].message }}
- OnlineStoreHelp 11 years ago
  
  For those of you using Woocommerce as an internet cart, this is an even bigger deal for you. Remember Woothemes uses Woocommerce and wordpress to run their checkout. If an exploit has been found that means all of you that use wordpress/woocommerce are now at risk. I was waiting for this to happen but I never expected it to happen to the developers themselves.
  
  Just to let everyone know, by law in 47 states you would be required to notify your customers of the breach and loss of data. See here just as an information source on data breach regulation:
  
  Perkins Coie - News / Publications - SECURITY BREACH NOTIFICATION CHART
  
  It is why I have always advocated using a dedicated shopping cart that is at least PCI certified (woo commerce is not) or a hosted cart that is PCI-DSS Level 1 compliant.
  
  Thanks
  
  Signature
  Learn how to set up a powerful, functional yet easy to use e-commerce website at cartprep.com.
  
  Not sure what ecommerce solution to use? Watch my video walk through of popular shopping carts.
  
  {{ DiscussionBoard.errors[9176628].message }}
realdude 11 years ago

Chris, appreciate your comment but not entirely accurate. When your clients use Woocommerce they select their own payment gateway. Most use Paypal with the transaction being completed on the Paypal site. The other "built-in" option is Mijireh which gives your clients access to over 90 PCI compliant gateways, including Authorize.Net and Stripe.

You also have the option of adding an SSL and using one of their payment gateway plug-ins.

Point-in-fact just about every major company gets hacked. It is our responsibility to update, monitor and correct any issues we find.
- Thanks
{{ DiscussionBoard.errors[9186984].message }}

ALERT: Woothemes Credit Card Fraud

Trending Topics

Should I Give this SEO Strategy a Go?

Learning AI

Hello Everyone

Struggling with Conversions: Seeking Insights on Boosting Paid Subscriptions for My Chrome Extension

Tiktok views!