New security notification during signin

[Cyberc1978]

It seems that after the most recent updates this morning a new security feature have been implemented.

When I signed in, I got the following mail:
I dont know what happens if you click the green button

 

[kristenrice]

I got the same e-mail...at 3am, but I hadn't signed in.
My dad signed in (as an associate member) and then he called me saying he got the e-mail too.
It's definitely a phishing e-mail so I did not click the link, but I am certainly concerned that somehow, someone has gotten a hold of a list of DVC member e-mails and is now trying to acquire passwords via phishing.

I really wish Disney had 2-factor authentication.

 

[Cyberc1978]

I got the same e-mail...at 3am, but I hadn't signed in.
My dad signed in (as an associate member) and then he called me saying he got the e-mail too.
It's definitely a phishing e-mail so I did not click the link, but I am certainly concerned that somehow, someone has gotten a hold of a list of DVC member e-mails and is now trying to acquire passwords via phishing.

I really wish Disney had 2-factor authentication.

I dont think it is, I got my email at the exact moment i typed in my login information and tried to sign in.

 

[condorthb]

I signed in just now, and e-mail was received within seconds.

 

[kristenrice]

I dont think it is, I got my email at the exact moment i typed in my login information and tried to sign in.

It's possible that it could be due to the update, but I am still suspicious of the timing. My dad changed his password and he got an email from a different domain confirming the login and password change. He immediately got ANOTHER e-mail "detecting" the login. I would like to have more information on this from those with more IT knowledge before I feel completely secure. I checked my account and everything looks fine, and I will be watching it closely.

 

[Cyberc1978]

I signed in just now, and e-mail was received within seconds.

Thats why I dont think its a phising email, unless DVC is infected with malware

 

[Meglen]

Only way this could be phishing would be if the dvc site was hacked or altered with malware. Just run a scan on the page and see if it pops a warning.

 

[Meglen]

Google does this aswell. If you sign in with a new IP address. Might just be them adding security.

 

[Cyberc1978]

Google does this aswell. If you sign in with a new IP address. Might just be them adding security.

This is exactly what I think they added this morning.

there was a note that the membership area was unavailable a few hours after midnight.

 

[kristenrice]

Question...
I logged in on Chrome and received the email immediately. I logged in on a different browser (Edge) and I immediately received the email again. Then, I logged out of the DVC site, turned on my VPN and logged in to the DVC site again...this time, no email. Why would this happen?

My dad figured out why I got the email at 3am without "signing on"...I leave my laptop in sleep mode and the DVC member page was open so I guess it was probable that I was "logged in" during the timeframe of the update and that's what triggered the email.

 

[Cyberc1978]

Question...
I logged in on Chrome and received the email immediately. I logged in on a different browser (Edge) and I immediately received the email again. Then, I logged out of the DVC site, turned on my VPN and logged in to the DVC site again...this time, no email. Why would this happen?

My dad figured out why I got the email at 3am without "signing on"...I leave my laptop in sleep mode and the DVC member page was open so I guess it was probable that I was "logged in" during the timeframe of the update and that's what triggered the email.

Normally I would assume you would have received the email when you turned on the VPN - maybe the reason you didn't because of a cookie or similar so they "knew" it was you.

 

[jerseyduke]

I got the same e-mail...at 3am, but I hadn't signed in.
My dad signed in (as an associate member) and then he called me saying he got the e-mail too.
It's definitely a phishing e-mail so I did not click the link, but I am certainly concerned that somehow, someone has gotten a hold of a list of DVC member e-mails and is now trying to acquire passwords via phishing.

I really wish Disney had 2-factor authentication.

Never click a link in an email., If you do make sure you look very very closely at the URL you go to.
I myself always go manually.

But I got it too right after logging in (and my location was off by about 550 miles....

 

[JETSDAD]

It happened to me yesterday as well so it wasn't just done overnight. They were very far off on my location when I logged on with my cell which threw me off a bit but it came at the exact time I logged on so I knew it was me lol I logged on this morning from a different computer and received the email again.

 

[TikiRob]

It happened to me last night. Nice thing to add, though as much as I've been stalking availability I'll be getting these emails all over town!

 

[han22735]

I just tried as well and logged in at work and instantly got the email.

 

[Pooh12863]

It seems that after the most recent updates this morning a new security feature have been implemented.

When I signed in, I got the following mail:
I dont know what happens if you click the green button

View attachment 469748

I chatted with DVC last night after receiving this email and was told it was legit.

 

[ziravan]

It’s new and glitchy apparently. Same thing happened here. I logged in in Texas on safari and it said someone in NJ tried to log in using safari at the same time.

meh. I didn’t click that link but I DID go to Disney and change my password.

 

[we"reofftoneverland]

I got the same thing after logging in this morning.

 

[kristenrice]

I chatted with DVC last night after receiving this email and was told it was legit.

So by “legit”, does this mean that the email is truly coming from Disney, in which case I need to be genuinely concerned that my account is being accessed by an a unauthorized party? Or does it mean that it is coming from Disney due to some sort of a glitch in their system?

 

[bwvBound]

Thanks for the dialog, all! Having read the first several posts of this thread, I logged in and received an email immediately. Perhaps this new "known client (browser)/device" measure will limit the bots that troll for open inventory.