FF Account just hacked and almost 300,000 points taken

[DontGetMeStarted]

Makes you wonder if QF should insert another security step into the process......maybe a text like internet banking?

Noreen I have my fingers crossed for you....

Once you get thru this stage.....get your computer looked at quick smart!

Amaroo..thankyou I am not really computer savvy but have contacted my ISP provider for home email and also contacted work IT as I log in from both home and work....I have security on my home pc...is there something else I should be looking at here to ensure security ?

 

[amaroo]

Amaroo..thankyou I am not really computer savvy but have contacted my ISP provider for home email and also contacted work IT as I log in from both home and work....I have security on my home pc...is there something else I should be looking at here to ensure security ?

FWIW I'd be taking it to an IT specialist and have them look at it. I'm pretty lame with computers so another member will no doubt have a better response to the question. Do you use your phone to access QF?

 

[robd]

I'd run the scan with the anti virus software.

Use someone else's computer to change ALL my passwords - banks, credit cards, etc.

Do you have the WEP key set up correctly on your router?

Get someone who knows about this stuff ASAP to help you.

Good luck Noreen.

 

[ozbeachbabe]

I don't suppose the IP address of the pc used to make the order is logged by Wishlist?

 

[Princess Fiona]

I don't suppose the IP address of the pc used to make the order is logged by Wishlist?

I would be surprised if there isn't some sort of trail.
I hope you get your points back Noreen.

 

[NM]

Amaroo..thankyou I am not really computer savvy but have contacted my ISP provider for home email and also contacted work IT as I log in from both home and work....I have security on my home pc...is there something else I should be looking at here to ensure security ?

I would be asking QFF if your account PIN was reset recently, and if so, was it done over the phone (i.e. by a phone agent) or on-line. There were reports a while back that people could have a QFF account PIN reset just by answering a few basic details over the phone (name, address etc). In one reported example, someone called up saying they had forgotten their FF account number, and after providing some basic personal details the account number was provided over the phone. Then a call back had another agent reset the PIN number for them. So don't assume its done through computer back-doors. Sometimes the worst cases of hacking use the simplest of processes. QFF people should be able to identify if/when the PIN was last reset.

But, as they have already told you, they will likely need you to supply a signed and witnessed Statutory Declaration before they will be willing to investigate thoroughly.

 

[Pushka]

I don't suppose the IP address of the pc used to make the order is logged by Wishlist?

Yes. It should have been. But there are ways around that too.

Just - all the best for a speedy resolution.

 

[Andyc]

What an unfortunate reminder to everyone about the security of their accounts.

It does bother me that accounts of far less importance to me have far more security than QFF. I don't understand why they don't allow for longer passwords, sms verification, 2nd factor authentication etc.

 

[vitagen]

Sorry to hear what has happened. Hope you get it all sorted out.

 

[DC3]

... I have never revealed my PIN number or FF to anyone unless its to Qantas to book flights, I have never even bought anything from their store in all the years I have been a member ...

And the FF # is on boarding passes along with your name. That's 2 out of the 3 things needed to log in to the FF account, which any number of people might have caught sight of.

So as long as your PIN is not from numbers from your FF account (e.g., the last 4 digits, or using 1234, etc) then it's going to be difficult to determine how someone has discovered your PIN (unless they looked over your shoulder at the (PER QC last week flying to/from BME, or anywhere else) if you used the computers there.

Anyway, I hope that this is resolved quickly for you.

 

[DontGetMeStarted]

Have lodged the Stat Dec now with QFF...interestingly the police told me that this was the 2nd complaint today and the 2nd Stat Dec signed about QFF points being hacked from an account !...no further details but I do wonder how often it happens. In the process now of changing all details everywhere else that I can think of. Honestly though we are pretty meticulous about keeping these things secure but obviously something has gone wrong somewhere. Thanks again to all and I am will update when I hear more

 

[Clivem]

Ouch ....... how many thousands of boarding passes with FF account numbers and full names have we all seen left in seat pockets over the year ...... very big wake up call .... I really hope this can be sorted Noreen.

 

[Pushka]

Another thing to cancel. Credit card details are often saved in the QFF profile as it asks you if you want to use the credit card on file.

 

[JohnK]

What a terrible thing to happen. Hope you get it all sorted quickly.

I would get the police involved as that is theft.

Hmmm.... Do QFF points have a value?

 

[DontGetMeStarted]

Another thing to cancel. Credit card details are often saved in the QFF profile as it asks you if you want to use the credit card on file.

OK thanks making a list now of things to cancel and change - I do think now that this has happened to me that the online security with Qantas needs to be changed and quickly to help secure everyones accounts

 

[DontGetMeStarted]

What a terrible thing to happen. Hope you get it all sorted quickly.


Hmmm.... Do QFF points have a value?

The police told me that it is up to Qantas to investigate not them...I am still at a loss as to why Qantas dont keep records of the email address vouchers are sent too and or voucher numbers issued to stop the transaction at the store or online purchase.....

 

[jetlagger]

What a terrible thing to happen. Hope you get it all sorted quickly.


Hmmm.... Do QFF points have a value?

It appears they certainly do..
Hope the thief gets caught.

 

[DC3]

What a terrible thing to happen. Hope you get it all sorted quickly.


Hmmm.... Do QFF points have a value?

Do they have a value? If you PM me your QFF account details, I will let you know.

 

[Pushka]

The police told me that it is up to Qantas to investigate not them...I am still at a loss as to why Qantas dont keep records of the email address vouchers are sent too and or voucher numbers issued to stop the transaction at the store or online purchase.....

I don't agree with that. What has happened is still a theft. That's like saying it's up to Myers to investigate if someone shoplifts from their store. I know credit cards get police involved with fraud - that happened to one of my cards. Ask to speak with a more senior officer.

 

[DontGetMeStarted]

Does anyone know that when this happens if your account gets blocked. I am trying to log into my account now with new PIN and it wont allow me in....way too stressful