Printable View
Abusing 1 per person point coupons, returns, trading points, using multiple cards, false contact info.
Unfortunately, due to this debacle, I don't see how one WOULD keep valid contact info up on their profile on the SDM site? It is so easy to get into someone's account simply by having their postal code. Even if someone has never traded points but has received a RAOK, he/she is at risk. It's not an SDM violation to give other ppl points, so it's not just traders who can be in trouble with this.
"5. Each Shoppers Optimum MemberŪ (sometimes referred to as a “Member”) will be issued a
Shoppers Optimum Card that has a unique number ascribed to it and is registered in the Member’s name. Shoppers Optimum Members cannot share their account number and account information with anyone else. Account information, including, but not limited to, the Shoppers Optimum account password and security questions should be protected and kept secure."
Security questions like your postal code and date of birth which your 'family' and 'friends' you are transferring to would easily know
Then SDM has gone against it's own policy by promoting transferring points right on their site! Why would they have an option like that if members "cannot share their account...with anyone else"?
SDM definitely has some work to do on their site, but ultimately, each person has to be super extra careful about their info too.... I've never traded points, but if I did, I would use hubby's card to do it. If you don't have a hubby, maybe ask your mom/dad/sibling if they can make a card for you (if they don't have one) and use that one to trade. That way you are abiding by the "one per person" rule and still protecting yourself....just a thought
I have spoken to one of the members in question again and they swore it is not them. I have no definite proof that it is them either. They have let me look into their private sdm account as well. Also, it would be pretty ballsy of this member to have stolen the points and keep coming on? We have had someone steal points before and they ran for the hills and never came back.
Anyways still investigating..... please do not send nasty pms to any members suspected.
I also came looking for Carly's thread and must have missed all the following comments.
I too found all my points gone when I went to do my mega redemption late last night. I had enough for one and half redemptions. I was standing there with a cart full of insulin supplies (needles, glucose, lancets, pen needle tips etc) plus stocking stuffers and some staples. Absolutely essential supplies for myself and 3 kids. The cashier was stunned and so was the pharmasist (he knows me well enough, we are a big customer). He phoned headquarters for me. He assured me it will be figured out and the points will be returned but he can't give me the definate date. So no mega redemption for me. When I get the points back I will still be able to get insulin supplies but probably have missed out on the extras. I am so P*****.
It upsets me to no end that it could have been localized to here! I presumed my count was hacked.
So here are my dealings. I have not been RAOKed points by anyone. I have traded a few extra points to others in the last few weeks. But I have not received any since the summer. Yes I have participated in past tell a friend events. No I do not have a second card.
I am so upset by this. I am a student this year and working just enough to suppliment student loans. I need my luck to change ( had some one smash my car head light in the parking lot on Friday and not leave a note). Anyways needless to say I am very upset. I really can't be focussing on this I have exams coming. I hope what ever hacker did it enjoys there Merry Christmas.
hollyhill, I am very very sorry :( In fact, my sympathies to everyone affected. Unfortunately, I'm pretty sure if some of us now offer a RAOK or something else, it will look suspicious :(
Quote:
Originally Posted by bullwinkled
I agree!!
I have had a few members pm me now that have had their points all stolen that have NOT traded or been raoked.
Like I said we just can't point fingers until I gather all evidence and Boo and I sit down and sort through all this.
I have been thinking about this and due to the lack of security on the website I think it would be rather easy to steal someones points. Someone standing behind you in line or a store clerk could see your number and based on what store you are at could guess at your postal code to get access to your account online. I think I am going to cover my numbers on the front of my card from now on as they only need to scan it at the store.
I agree that no one should be blamed as I am sure that SDM will sort it all out and the truth will come out in the end.
Quote:
Originally Posted by hollyhill
Thank you for coming forward. So many have been quick to point their fingers generally at one member that people coming forward that have not raoked or traded and had their stuff stolen that its showing NOT to just assume that its someone. We are still investigating but... if this investigation turns out to be a breach by sdm a lot of apologies are going to need to be given.
I for one hope its a security breach and not a member of sc.
and yes, that was one heck of a run on sentence.
I did. She roak'd them to me and I had my points. redeemed once yesterday and once today!!! no problems!!
Quote:
Originally Posted by Sally888
OMG, I was too busy yesterday, redemption, family gatherings as well as taking care of a sick dd. How can this happen to some people just before the redemption? We have been waiting for this with our hard earned points and then it just poofed? I hope this gets sorted out and my sympathies to everyone who lost their points :(
Thats so horrible holly, I hope they sort the situation out for you
My heart goes out to everyone who's been effected by this, just reading all the things that have happened makes me so incredibly sad. Though it's a life lesson to always protect your personal information. I plan on getting a new card tomorrow, and I'm not trading points anymore. I also have never posted my real birthday anywhere, not even Facebook, because your birthday is enough information to access personal information on a person. Find a credit card? All you need is to google search the person's facebook page, and you have their birthday to access their balance, transactions, log into telephone banking to change their credit card PIN and spend away.
I also always keep every receipt I get- any transaction using a gift card, points card, credit card or debit card has enough information on it I just don't want someone else to have access to if it gets lost. Whenever I come home, all the receipts that pile up in my purse just get thrown into a little box, it's just another way to ensure your info is safe and makes it easier for returns if you ever need to do them.
I know it seems like a lot, or seems like I'm being paranoid. But I started protecting as much information about myself as I can after I had money stolen from my personal bank account. My bank fixed the situation very quickly, but having that happen made me realize I should start being cautious about everything I do.