Hi everyone!
Please accept my sincerest apologies for this 2-day downtime. Fortunately, there is nothing wrong with our server -- the mechanical device that stores our web sites -- nor have we been hacked for personal information. We didn't discover until late last night that someone entered our server through a direct account set up years ago, not a "TGM AVP" account like all of you have, and removed the internet address files required to display a web site. We can see that they tested their own access to the server a week ago, and then at 3:45 p.m. 2 days ago, went in and removed the specific files that would shut TGM.com down completely. They also took the extra step of removing key files from the server's Windows software so that it would have to be completely reinstalled.
So ... that's the technical stuff as best as I can openly describe. That, and I'm anything but an IT specialist, so if I said something above that doesn't make complete sense to more knowledgeable people than myself, know that it's accidental. All that I care about is if our database used for my TGM guests had been accessed -- no -- and was anything done to remove updates or files from the database to affect the site's content -- again, no. We should be exactly where we were when the site went down at 3:45 p.m. 2 days ago as soon as we're back online.
It appears that the only goal this individual had was to remove tourguidemike.com from the internet and nothing more. In a weird way, I'm thankful, and we should be back up in a few hours from now (I'm typing this at 1:22 p.m. on Fri, March 2).
I know everyone worries about their credit card information when they hear a commerce site has gone down or been illegally accessed, and please know that we never store anyone's financial information anyway. We had that as a prerequisite for running an online business years ago when developing the business plan for tourguidemike.com because at the time, around 2001, hacking was receiving more and more press. We use Verisign to encrypt the purchase page, one of the Internet's most recognized and respected companies for that purpose, and Authorize.Net to approve your credit card purchases. Once your purchase is authorized by your own credit card company or bank, everything but the last 4 digits and your card's date of expiration is removed. Even I do not have access to this information -- nor did I ever want or need that responsibility.
For the record, I just received an angry email from someone stating that they have not been able to access the web site "all week." This simply is not true. We transferred TGM.com to a new server hosting company several months ago and this is actually the first downtime we have experienced beyond a few minutes here and there. However, if anyone out there wants a refund because of this downtime, or for any other reason, please use the "Contact Us" link that's at the bottom of every page, public or while logged in, on the entire web site. Again, I sincerely apologize for this inconvenience, and I do completely understand how frustrating it must be -- especially for those leaving yesterday or very soon, and please know that we are taking every measure we can to ensure this does not happen again.
I hope everyone has a great day today, and I also appreciate your support with this matter. Thank you!
Best regards,
Mike Hewell
a.k.a. TourGuideMiKE