Email Warning from Disney Destinations

corpcomp

The 100 Yard Dash and Mr. D
Joined
Apr 1, 2006
Messages
1,634
Anyone else get this from Disney Destinations?? I also got the same message from the College Board last night

Dear Guest:

We have been informed by one of our email service providers, Epsilon,
that your email address was exposed by an unauthorized entry into that
provider's computer system. We use our email service providers to
help us manage the large number of email communications with our
guests. Our email service providers send emails on our behalf to
guests who have chosen to receive email communications from us.

We regret that this incident has occurred and any inconvenience this
incident may cause you. We take your privacy very seriously, and we
will continue to work diligently to protect your personal information.

We want to assure you that your email address was the only personal
information we have regarding you that was compromised in this
incident.

As a result of this incident, it is possible that you may receive spam
email messages, emails that contain links containing computer viruses
or other types of computer malware, or emails that seek to deceive you
into providing personal or credit card information. As a result, you
should be extremely cautious before opening links or attachments from
unknown third parties or providing a credit card number or other
sensitive information in response to any email.

If you have any questions regarding this incident, please contact us
at (407) 560-2547 during the hours of 9:00 am to 7:00 pm (Eastern Time)
Monday through Friday, and 9:00 am through 5:00 pm (Eastern Time)
Saturday and Sunday.

Sincerely,

Disney Destinations
 
I got something in my spam folder I just deleted it instead of reading it, probably what it was!
 

I received the Disney email this morning but I had already received spam to my email address last week. The address is only used for Disney so I know that it is a result of the DD hack.

If Disney is going to provide our info to their vendors, you would think that they would require better safeguards.
 
bunches of companies were hacked! I have received 3 email warnings already!
 
/
Yup, same here... DD & the College Board.

There's a thread on the resorts board http://www.disboards.com/showthread.php?t=2692666 that lists other companies as well.

Not cool :sad2:

Thanks for the link - not a lot of info provided by Epsilon. Just to make sure no other info was taken, I changed some of my passwords to my bank accounts. Very poor security by that company. DD should change companies to someone who takes more effort to block access.
 
didn't get it from Disney, but from another site.

just got the one from Disney Destinations too.
 
bunches of companies were hacked! I have received 3 email warnings already!

Same here. I think it was one company that was hacked, but it was a marketing firm that many other companies use. Epsilon, or something like that. I thought the first notice could be a scam but I have received 3 or 4 of them now worded almost exactly alike.
 
If Disney is going to provide our info to their vendors, you would think that they would require better safeguards.
It is unreasonable to expect perfection. Even RSA, perhaps one of the top IT security companies in the world, was hacked recently.
http://blogs.rsa.com/rivner/anatomy-of-an-attack/

Kudos to Disney for letting their customers know, and reminding them to be on the alert for unusual email messages. I bet a lot of that firm's clients won't do the same.
 
Yup, got it from Disney Destinations and College Board. Have to be careful what e-mails I open now.
 
It's not so much opening the email that is the problem. It is clicking on links, opening attachments, etc. Here is a quick introduction to the issue:

http://en.wikipedia.org/wiki/Phishing

As an aside, there was also a recent (completely unrelated) attack on a Certificate Authority, which compromised that CA's private key. Until web browsers are updated to remove that CA's public key, the person with the private key can masquerade as any "secure" web site they wish. So, even if you get a note *from your bank* asking you to reply with your password, or click on a link, don't---instead, navigate to the bank's home page by typing it into your browser, and log in from there.

http://bits.blogs.nytimes.com/2011/03/24/iranian-hackers-suspected-in-recent-security-breach/
 
I got something this morning from disney. The address leads back to :
I WOULD NOT NOT CLICK ON THIS : 1f364c56elayfivcbawrrahqaaaaabf4fpbxurosjsyyaaaaa@vacation.disneyworld.com (sounds awfully fishy to me).......and subject line of email was :
Re: Important Information for Disney Destinations Email Recipients

But when I opened the email (AOL ISP) it was blank.
When I clicked on details of sender....got this :

MAILINMC053-a9694d9872fe1be; Sun, 03 Apr 2011 09:15:42 -0400
Received: from bigfootinteractive.com (arm238.bigfootinteractive.com [206.132.3.238])
by mtain-de10.r1000.mx.aol.com (Internet Inbound) with ESMTP id 7CF5F38000081
 
I got one yesterday from HSN (Home Shopping Network). The funny thing with the Disney one is the body of the e-mail was blank!
 
I'm more upset about the College Board - they have more protected data as in social security number! Ticks me off that my 17 year old might be a victim of identity theft because she took a required test to apply for college!:mad:
 















DIS Facebook DIS youtube DIS Instagram DIS Pinterest DIS Tiktok DIS Twitter

Back
Top