Letter informing of data breach not disclosing the website

[jtvang125]

I got a letter from TradeMotions the other day informing me that my information may have been compromised due to a data breach. From what I read their business is in the automotive parts industry. The letter doesn't mention the site(s) that were compromised but mentioned it was hit atleast 5 times. I know it's probably futile but I still would like to know the name of the sites and decide if I want to continue doing business there. Of course this is probably why it wasn't mentioned in the first place.

 

[RLGL]

I have had the same experience, hacked site but no mention of the address.

 

[BarkingGhostar]

How do you know it isn't a scam or some sort?

 

[jtvang125]

It wasn't a letter in an email but a printed one mailed. A google search on trademotions data breach shows a recent letter to an AG notifying of the breach. There's a 1yr free monitoring by Lifelock which I signed up for.

I think they do OEM parts for dealers so I suspect it's a site for BMW parts that I usually get my oil change kit from. I do order from half a dozen sites for parts so it can still be any of them.

 

[Kaido]

 

[Red Squirrel]

There really needs to be better laws for this stuff. It's gross negligence, and it should lead to jail time. It's ridiculous how most companies simply don't care, and it's because they don't actually have to. There's just so many breaches now days and it's because companies know that nothing bad will happen to them so no point in bothering with any security. The Equifax breach is a good example of one that should have lead to execs doing jail time. Make it 35 years to set an example. They do it for piracy... and that does not cause millions of people's lives being affected. Too bad governments don't care either, so we're never actually going to see laws to protect us from this type of gross negligence.

 

[ultimatebob]

They forgot the three digit security code on the back.

 

[ultimatebob]

But, seriously, we should just randomly accuse various auto parts companies as the source of the breach until we get them all to deny it. Once we get enough denials, I think that we'll be able to figure out who the culprit is.

So, you heard it here first: The company that had their security breached was Rock Auto. Or Autozone. Maybe both. Prove me wrong