<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">My first inkling of trouble came when I got an email telling me my Fedex account was approved. I did nothing as I wasn't even sure it was Fedex that sent the email. The next thing that happened was Mastercard called with concern about three purchases going to an address different than the billing address and we canceled the card immediately. I then started getting calls from folks all over the country who were getting envelopes with checks in them. I called Fedex and made sure the account was closed. Since then I have been getting bills from Fedex and I must be owing close to $9000 now. I can't believe Fedex would let a new account run up that kind of debt without ever having done any business with them and never checking to see if it were legit. Makes you want to burn all your credit cards.<div><br></div><div>Jim O</div><div><br></div><div><br><div><div>On Nov 19, 2008, at 6:32 PM, Chris Moon wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 18px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div bgcolor="#ffffff" text="#000000">Guys:<br>I kind of doubt it was simply a breach of their external credit card processor, and here's why. On Monday, I received a small print order (less than $6) from an online printing company. The small box had my name and address correctly on it and it was from a company that had 3 of the fraudulent charges on my credit card. I did not order this stuff of course, but the thieves clearly had not only my valid credit card number and expiration date as a processing company might have, but had my correct name and address to go with it. One of the online forums had a posting from a guy who said they had enough info on him to get this bank to release the pin# for his card to THEM and subsequently took out $400 in cash advances. So unless the credit card processors need the name and address data too in order to process the charges (I know for a fact they did not need this data years ago), I think it was the FMA internal server that was hacked, or an inside job from an employee or ex-employee - which I think is most likely. <span class="Apple-converted-space"> </span><br><br>Chris<br><br>Pete Cosky wrote:<blockquote cite="mid:003901c94ab5$030a4330$aa440a0a@usa.ccu.clearchannel.com" type="cite"><div><font face="Arial" size="2">That's the truth. A lock only keeps an honest man honest.</font></div><div> </div><div><font face="Arial" size="2">From what I gathered it wasn't FMA that was compromised, it was their payment processor, which begs the question how many other businesses are impacted by this breach.</font></div><blockquote style="border-left-width: 2px; border-left-style: solid; border-left-color: rgb(0, 0, 0); padding-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px; "><div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; ">----- Original Message -----</div><div style="background-image: none; background-repeat: repeat; background-attachment: scroll; -webkit-background-clip: initial; -webkit-background-origin: initial; background-color: rgb(228, 228, 228); font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; background-position: 0% 50%; "><b>From:</b><span class="Apple-converted-space"> </span><a moz-do-not-send="true" title="astafford@swtexas.net" href="mailto:astafford@swtexas.net" style="color: blue; text-decoration: underline; ">Archie Stafford</a></div><div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; "><b>To:</b><span class="Apple-converted-space"> </span><a moz-do-not-send="true" title="nsrca-discussion@lists.nsrca.org" href="mailto:nsrca-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">'General pattern discussion'</a></div><div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; "><b>Sent:</b><span class="Apple-converted-space"> </span>Wednesday, November 19, 2008 7:29 PM</div><div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; "><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [NSRCA-discussion] FMA Database Compromised</div><div><br></div><div class="Section1"><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; ">Matt,<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; ">The security symbol would not have helped here. I’m sure FMA has a fairly secure site. Their database was what was compromised. Technology improves daily for this type of fraud…but so do the people doing it. <o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; ">Arch<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; "><o:p> </o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; color: navy; font-family: Arial; "><o:p> </o:p></span></font></div><div><div class="MsoNormal" align="center" style="text-align: center; margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><hr tabindex="-1" align="center" size="2" width="100%"></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><b><font face="Tahoma" size="2"><span style="font-weight: bold; font-size: 10pt; font-family: Tahoma; ">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; "><span class="Apple-converted-space"> </span><a moz-do-not-send="true" href="mailto:nsrca-discussion-bounces@lists.nsrca.org" style="color: blue; text-decoration: underline; ">nsrca-discussion-bounces@lists.nsrca.org</a><span class="Apple-converted-space"> </span>[<a class="moz-txt-link-freetext" href="mailto:nsrca-discussion-bounces@lists.nsrca.org" style="color: blue; text-decoration: underline; ">mailto:nsrca-discussion-bounces@lists.nsrca.org</a>]<span class="Apple-converted-space"> </span><b><span style="font-weight: bold; ">On Behalf Of<span class="Apple-converted-space"> </span></span></b>MATT LIPRIE<br><b><span style="font-weight: bold; ">Sent:</span></b><span class="Apple-converted-space"> </span>Thursday, November 20, 2008 4:53 AM<br><b><span style="font-weight: bold; ">To:</span></b><span class="Apple-converted-space"> </span><a class="moz-txt-link-abbreviated" href="mailto:mups1953@yahoo.com" style="color: blue; text-decoration: underline; ">mups1953@yahoo.com</a>; General pattern discussion<br><b><span style="font-weight: bold; ">Subject:</span></b><span class="Apple-converted-space"> </span>Re: [NSRCA-discussion] FMA Database Compromised</span></font><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><o:p> </o:p></span></font></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><em><i><font face="Times New Roman" size="3"><span style="font-size: 12pt; ">That is why I am so leary of using a credit card somewhere like that. Plus I do always check if the website has a little security symbol on the bottom of the page.</span></font></i></em><o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "> <o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><em><i><font face="Times New Roman" size="3"><span style="font-size: 12pt; ">Matthew L.</span></font></i></em><o:p></o:p></div></div><blockquote style="border-top-style: none; border-right-style: none; border-bottom-style: none; border-left-style: solid; border-top-width: medium; border-right-width: medium; border-bottom-width: medium; border-left-width: 1.5pt; margin-top: 5pt; margin-right: 0in; margin-bottom: 5pt; margin-left: 3.75pt; padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 4pt; "><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; ">----- Original Message -----<o:p></o:p></span></font></div></div><div><div style="background-image: none; background-repeat: repeat; background-attachment: scroll; -webkit-background-clip: initial; -webkit-background-origin: initial; background-color: rgb(228, 228, 228); margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; background-position: 0% 50%; "><b><font face="Arial" size="2"><span style="font-weight: bold; font-size: 10pt; font-family: Arial; ">From:</span></font></b><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><span class="Apple-converted-space"> </span><a moz-do-not-send="true" title="mups1953@yahoo.com" href="mailto:mups1953@yahoo.com" style="color: blue; text-decoration: underline; ">mike mueller</a><o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><b><font face="Arial" size="2"><span style="font-weight: bold; font-size: 10pt; font-family: Arial; ">To:</span></font></b><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><span class="Apple-converted-space"> </span><a moz-do-not-send="true" title="nsrca-discussion@lists.nsrca.org" href="mailto:nsrca-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">General pattern discussion</a><o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><b><font face="Arial" size="2"><span style="font-weight: bold; font-size: 10pt; font-family: Arial; ">Sent:</span></font></b><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><span class="Apple-converted-space"> </span>Wednesday, November 19, 2008 7:52 AM<o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><b><font face="Arial" size="2"><span style="font-weight: bold; font-size: 10pt; font-family: Arial; ">Subject:</span></font></b><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; "><span class="Apple-converted-space"> </span>Re: [NSRCA-discussion] FMA Database Compromised<o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><o:p> </o:p></span></font></div></div><table class="MsoNormalTable" border="0" cellpadding="0" cellspacing="0"><tbody><tr><td valign="top" style="padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "> Bingo, that explains it. Good catch!<br><br>--- On<span class="Apple-converted-space"> </span><b><span style="font-weight: bold; ">Tue, 11/18/08, MKMSG<span class="Apple-converted-space"> </span><i><span style="font-style: italic; "><<a moz-do-not-send="true" href="mailto:mkmsg@cox.net" style="color: blue; text-decoration: underline; ">mkmsg@cox.net</a>></span></i></span></b><span class="Apple-converted-space"> </span>wrote:<o:p></o:p></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; ">From: MKMSG <<a moz-do-not-send="true" href="mailto:mkmsg@cox.net" style="color: blue; text-decoration: underline; ">mkmsg@cox.net</a>><br>Subject: [NSRCA-discussion] FMA Database Compromised<br>To: "NSRCA Discussion List" <<a moz-do-not-send="true" href="mailto:nsrca-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">nsrca-discussion@lists.nsrca.org</a>><br>Date: Tuesday, November 18, 2008, 11:14 PM<o:p></o:p></span></font></div><div id="yiv132201810"><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Arial" size="3"><span style="font-size: 12pt; font-family: Arial; ">If any of you have recently bought products on line from FMA Direct using a credit card, check your credit card account. FMA's database has been compromised/hacked and whoever has the information is making charges against the credit cards. I read this in the electric forum on Ezonemag.com. Sure enough, when I brought up my VISA account, there was a NAPSTER charge there so I cancelled the card. You might want to check yours if you've done business on line with FMA recently.</span></font><o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "> <o:p></o:p></span></font></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Arial" size="3"><span style="font-size: 12pt; font-family: Arial; ">Mike</span></font><o:p></o:p></div></div><blockquote style="border-top-style: none; border-right-style: none; border-bottom-style: none; border-left-style: solid; border-top-width: medium; border-right-width: medium; border-bottom-width: medium; border-left-width: 1.5pt; margin-top: 5pt; margin-right: 0in; margin-bottom: 5pt; margin-left: 3.75pt; padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 4pt; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "> <o:p></o:p></span></font></div></blockquote></div><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Courier New" size="2"><span style="font-size: 10pt; ">_______________________________________________<o:p></o:p></span></font></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Courier New" size="2"><span style="font-size: 10pt; ">NSRCA-discussion mailing list<o:p></o:p></span></font></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Courier New" size="2"><span style="font-size: 10pt; "><a class="moz-txt-link-abbreviated" href="mailto:NSRCA-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">NSRCA-discussion@lists.nsrca.org</a><o:p></o:p></span></font></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><font face="Courier New" size="2"><span style="font-size: 10pt; "><a class="moz-txt-link-freetext" href="http://lists.nsrca.org/mailman/listinfo/nsrca-discussion" style="color: blue; text-decoration: underline; ">http://lists.nsrca.org/mailman/listinfo/nsrca-discussion</a><o:p></o:p></span></font></pre></td></tr></tbody></table><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><o:p> </o:p></span></font></div><div class="MsoNormal" align="center" style="text-align: center; margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><hr align="center" size="2" width="100%"></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; ">_______________________________________________<br>NSRCA-discussion mailing list<br><a class="moz-txt-link-abbreviated" href="mailto:NSRCA-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">NSRCA-discussion@lists.nsrca.org</a><br><a class="moz-txt-link-freetext" href="http://lists.nsrca.org/mailman/listinfo/nsrca-discussion" style="color: blue; text-decoration: underline; ">http://lists.nsrca.org/mailman/listinfo/nsrca-discussion</a><o:p></o:p></span></font></div><div class="MsoNormal" align="center" style="text-align: center; margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><hr align="center" size="2" width="100%"></span></font></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman'; "><font face="Times New Roman" size="3"><span style="font-size: 12pt; "><br>No virus found in this incoming message.<br>Checked by AVG -<span class="Apple-converted-space"> </span><a class="moz-txt-link-freetext" href="http://www.avg.com" style="color: blue; text-decoration: underline; ">http://www.avg.com</a><span class="Apple-converted-space"> </span><br>Version: 8.0.175 / Virus Database: 270.9.7/1799 - Release Date: 11/19/2008 8:58 AM<o:p></o:p></span></font></div></blockquote></div><div style="margin-right: 0in; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman'; "><br class="webkit-block-placeholder"></div><hr>_______________________________________________<br>NSRCA-discussion mailing list<br><a class="moz-txt-link-abbreviated" href="mailto:NSRCA-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">NSRCA-discussion@lists.nsrca.org</a><br><a class="moz-txt-link-freetext" href="http://lists.nsrca.org/mailman/listinfo/nsrca-discussion" style="color: blue; text-decoration: underline; ">http://lists.nsrca.org/mailman/listinfo/nsrca-discussion</a></blockquote><pre wrap="" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><hr size="4" width="90%">_______________________________________________
NSRCA-discussion mailing list
<a class="moz-txt-link-abbreviated" href="mailto:NSRCA-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">NSRCA-discussion@lists.nsrca.org</a>
<a class="moz-txt-link-freetext" href="http://lists.nsrca.org/mailman/listinfo/nsrca-discussion" style="color: blue; text-decoration: underline; ">http://lists.nsrca.org/mailman/listinfo/nsrca-discussion</a></pre></blockquote>_______________________________________________<br>NSRCA-discussion mailing list<br><a href="mailto:NSRCA-discussion@lists.nsrca.org" style="color: blue; text-decoration: underline; ">NSRCA-discussion@lists.nsrca.org</a><br><a href="http://lists.nsrca.org/mailman/listinfo/nsrca-discussion" style="color: blue; text-decoration: underline; ">http://lists.nsrca.org/mailman/listinfo/nsrca-discussion</a></div></span></blockquote></div><br></div></body></html>