Wemoto have suffered a data breach

[b1k3rdude]

"Dear Customer,

At Worlds End Motorcycles Ltd, we respect the privacy of your personal data, which is why we are writing to let you know about a data security incident that potentially involves some of your personal data. This does not include any card or payment information as we never store these details.

On Dec 10th, 2021, we were made aware of a potential breach of the data that we hold with our service provider. The data accessed may have included the following types of personal information:

- Email address, first and last name

We deeply regret that this incident occurred. We are fully investigating the issue with our Service Provider to ensure that no such breach can occur in the future.

We have implemented additional security measures designed to prevent future attacks and to protect your personal information and the privacy of our customers. You do not need to take any action following this email.

Sincerely
The Worlds End Group"

This is exactly why I DO NOT let businesses keep my card details, but for good measure I have removed my postal address from the account and reset my password.

[Grahamm]

I got the same thing, although, because I own my own domain, I can use meaningful email addresses, so theirs would be wemoto@mydomain and I can always change the address and filter any spam sent to the old one.

If your card details are compromised by a data breach, you're not liable for any losses, because it wasn't you who were careless or negligent with them, the only hassle would be getting new cards.

PCI-DSS standards are actually very strict when it comes to storing card details, so any company that does is going to have some serious questions to answer from the card processors!

[BBROWN1664]

PCI-DSS standards are actually very strict when it comes to storing card details, so any company that does is going to have some serious questions to answer from the card processors!

:agree

Normally any card details stored in the databases are encrypted so even a system admin cannot log in a see the details. You can only unencrypt the details if your using the right application with the correct "key". Even call recordings where you give the details are paused so as to not actually record those details.
It is very rare for real card details to be obtained any way other than you handing them over.

[b1k3rdude]

It is very rare for real card details to be obtained any way other than you handing them over.

Doesn't explain why CC leaks keep happening, another example -

- https://www.bleepingcomputer.com/news/se...ear-sites/

[Rob R]

"..... This does not include any card or payment information as we never store these details." Surely this should provide some reassurance ?Rob

[beuleux]

Wemoto are within driving distance for me so fortunately I am not affected by the breach, but in all honesty although they have a good range of stock they are not my first choice for spares, often you have to wait a week for oem parts and just as often the pattern parts are substandard if the actually fit at all that is