[snaimpally]

A few weeks ago, the fraud dept. of my credit card (CC) company called me and told me that my account had been compromised and someone had tried to purchase items using my CC number. They canceled the card and sent me a new card but I had to go and change all my passwords etc.

I couldn't figure out how my CC had been compromised until Saturday, when I received a letter from MileOne Automotive that operates GetBMWParts. Their website is operated by a company called TradeMotion, which experienced a security breach resulting in the "unauthorized acquisition of customer credit card information."

So if you have an account with GetBMWParts, I suggest you change your passwords and closely monitor your credit cards for suspicious activity.

[roll_the_dice]

I had the same thing happen to me with my AMEX except someone used it for $4500 for NY Mets tickets over a 2 week period! AMEX took care of it for me and got me a new card, etc, but was still a hassle. I suspected there was a breach with getbmwparts servers because my charges happened almost immediately after I used it for the first time at Getbmw...

I received the same letter Saturday. I monitor my CC's pretty closely and use my AMEX all the time online...this is the 4th time in 4 years my AMEX number has been stolen. Always a hassle, but always taken care of...AMEX does a great job taking care of me when this happens.

This is the first time a company has sent me a letter to inform me and actually are paying for fraud alert for everyone that was on the server....so that is good!

[WRichieX]

Got the same notice. I got a new card in the mail which I thought was odd since I just replaced it not too long ago as it cracked in half. I called my CC company and they told me there were some weird activity and just issued a new card. Then last week, I get a letter in the mail from a company that represents getbmwparts. We get free fraud protection!! whoo hoo!

[Evan@Tischer]

Dear valued getBMWparts.com customers and forum members,

Regarding the security breach notice our Corporation – MileOne Automotive recently sent only to customers recognized as potentially at risk - we can certainly understand your questions and frustration. As stated in the notification letter, however, the security incident did not occur on MileOne’s systems or on our GetBMWParts.com or SubaruPartsDepot.com websites. Rather, the incident originated at one of our third party vendors, TradeMotion. TradeMotion is an e-commerce service provider that we, and hundreds of other online retailers (including other vendors on these forums), use to process online transactions including payment processing. Nonetheless, we recognize that you purchased one or more of our products and we take the privacy and security of our customers extremely seriously. That is why, despite the fact the incident did not originate with our systems, we took proactive steps to help you minimize potential harm from the incident.

As to any concerns regarding the timing of the incident and the notification, the dates identified in the letter reflect the period of time that TradeMotion has determined account information was vulnerable to unauthorized acquisition. The March 5, 2014 date is not the date when the security incident was discovered. Rather, it is the beginning of the security breach period which was determined after the breach was discovered and TradeMotion completed its investigation. The notice was provided only to customers identified as potentially at risk after TradeMotion completed its investigation, including the following:

• Notifying the appropriate law enforcement authorities;
• Investigating to determine the cause and scope of the breach;
• Investigating to determine which businesses’ customer information was affected (because TradeMotion is a service provider for more than just GetBMWParts.com and SubaruPartsDepot.com);
• Implementing corrective action to secure the system to protect customer information from further compromise; and,
• Identifying the affected customers and the customer information that may have been compromised.

We continue to encourage you to take advantage of the complementary ProtectMyID program being offered through the notice. In addition to the ProtectMyID program, you are also encouraged to consider the “Additional Actions” described in the notice, including:

• Placing a fraud alert on the your consumer reporting agency file;
• Placing a security freeze on your consumer reporting agency file;
• Obtaining a copy of your free annual credit report from reporting agencies and reviewing it carefully for any discrepancies;
• Reviewing account statements carefully for signs of unauthorized transactions; and,
• Reviewing the FTC’s identify theft website for additional information.

Should you have any additional questions or comments regarding this matter, please do not hesitate to contact us at getHelp@getBMWparts.com - further questions will not be answered here.

Sincerely,

getBMWparts.com
MileOne Automotive
Email: getHelp@getBMWparts.com

[snaimpally]

Yes - the breach occurred at TradeMotion which operates the e-commerce part of GetBmwParts website.

[mythek]

lol wow great timing, i just purchased something from tischer's website like last week. what a timing!


but just fyi for those concerned, something like this happens everyday. if you are really worried, simply call your bank to replace your debit/credit card. I work for the largest bank in america, and i deal with these types of issue on a regular basis.

[DT_F80]

Wow these guys are quick. Someone used my card in Las Vegas on Sunday so my bank flagged it. Luckily it was only a charge of $7.75 at Caesars Palace...