TL;DR? If you get notified that your credit card information has been compromised, and the suggestion is to close the account and have your bank reissue a new one? DO IT!!
The longer more detailed version:
I placed an order with curlmart back the beginning of October for some curly hair products that were cheaper to buy through them than directly through the company that made them. November 3rd, I get a wonderful email from them, which I’ll paste below for your viewing pleasure:
Dear CurlMart customers,
The purpose of this email is to inform you of an information security incident at CurlMart.com that potentially could affect you. Hackers recently penetrated our firewall and gained access to data containing your name and credit card information without our knowledge. Although we believe the exposure to be minimal, it is possible that your information could have been viewed by others.
In order to ensure your credit information was not used by third parties without your consent, we recommend that you monitor your credit report information and notify your credit card company if anyone attempts to obtain credit in your name. This could serve as an early warning if you become a victim of identity theft, even if such an occurrence is unrelated to this incident. You may also place a “fraud alert” on your personal credit file, which requires creditors to contact you before they open any new accounts or change your existing accounts. To place a fraud alert on your file, you should contact anyone of the three major credit bureaus listed below. As soon as one credit bureau confirms your fraud alert, the others are notified to do the same.
Even if you do not find any suspicious activity on your initial credit reports, we encourage you to consider cancelling your credit card or at a minimum actively monitoring your account statements and credit reports. For more information on identity theft and detailed instructions on other actions you might consider, visit the Federal Trade Commission’s (hereinafter “FTC”) website at http://www.ftc.gov. If you believe you have been a victim of identity theft, we encourage you to contact the FTC immediately by calling the FTC hotline at 1-877-IDTHEFT.
We take our responsibility for safeguarding your confidential and personal information very seriously. Please be assured that we have taken the appropriate steps to correct the breach and protect your personal information from further disclosure. If you have any questions or additional concerns, please do not hesitate to email us at firstname.lastname@example.org.
Thank you for your cooperation and understanding.
I didn’t think much of it. I’ve had this happen once or twice before and nothing has ever come of it. Hell, I had my mail stolen a few years ago, and nothing ever came of that.
Well, I got an email today alerting me that credit card statement was ready from my credit union card. That’s strange. I usually only get a statement when I carry a balance, and I knew I had paid off my balance. Log in. $355.58 to Merrell.com. WHAT?!/1/? Call the bank, nothing else has been charged that isn’t mine. Seems fishy. Call Merrell, but because it’s after business hours, all they can do is search by my name. No orders in my name. Hmmm. I was just double checking that I hadn’t ‘accidentally’ ordered something. As I do like Merrell’s products, but I’m pretty sure they don’t have what I need this season. Call back the bank, start the fraud process. Come home, place a fraud alert on with the credit agencies. Close the affected account. Read about problems others have had with their stolen info from curlmart. *ishg* Place a fraud alert on my other credit card, just in case (didn’t want to have it reissued as I know I have pending charges on it, and I don’t think it’s been compromised, just the one card). About all I can do tonight.
So now I wait. Tomorrow I’ll call Merrell’s business person to see what I information I can get out of her. At that point, I’ll probably file a police report. And then I’ll wait for the fraudulent charges paper work to arrive from my bank. As far as I understand it, there is nothing else I can do on my end. It’s a good thing I keep a close eye on my accounts. And it’s a good thing I know how to calmly talk to phone reps and explain what is that is going on and what I need. Honestly, at this point this feels anticlimactic. Hopefully I won’t have any problems getting the money credited back to my account. I’m hoping that since my credit union has been so fabulous with everything else that they will be fabulous with this too. Guess I’ll find out soon enough.
And as I said on FB: They best have bought damn running shoes.