|
Joe Hussar -> web site security issue (8/6/2004 6:15:01)
|
I've have had my Front Page web site hosted with a very reputable server for several years. I have a shopping cart which is secured via SSL technology (Thawte).
Starting about 3 weeks ago I've had a number of instances where the customer credit card is denied by the credit card company when I process the order. The reason turns out to be that the credit card number was stolen and used fradulantly. This is all a very recent development. Of course there are always bad credit cards submitted, but the sheer number of instances and the almost identical circumstances is like a "run on the bank", highly unlikely to be just random timing, etc.
Sometimes the customer finds this out after I advise him/her that the credit card was denied; they then call the credit card company to find out what's going on. Sometimes the customer is advised directly by the credit card company (before I've even had a chance to call). In almost all of these cases the customer tells us they did NOT go anywhere else and use their card. They are convinced something is happening at my end (web site).
One problem I've had in trying to find out the cause is they have not been able to provide any specific information.........one customer told me she had to have a subpoena to get the details, and since the credit card company doesn't charge her for what is admittedly fradulant, she just didn't want to bother with it.
I have fire walls, and all the usual security protection. I have ruled out employee theft. I can find no place where my site is "leaking" but it's just too much of a coincidence.
Does anyone have any suggestions? Can anyone tell me where I could find a computer security "expert" that could really help me get to the bottom of this issue? It's a potential disaster.
Thanks!
Joe Hussar
candywebster@aol.com
http://www.candylandcrafts.com/
|
|
|
|
