Journal LoadWB's Journal: I believe Sprint PCS customer accounts are compromised 2
I have sat on this for a couple of weeks and I will no longer do so.
I have received spam email to an email address which was specifically used for communication with SprintPCS for my business data card account. Three other people who are also SprintPCS customers received the same email from the same source with the same content.
SprintPCS is adamant that it does not sell or give out customer account details.
According to my mail server logs, these emails began on January 17th. My concern at this point is that my email address, specifically crafted for use only with SprintPCS, that no one on the face of this planet or regional solar system has, and is not easy to guess, has been obtained by illegitimate means. That being the case, my concern is that other account details may have been obtained.
Over the course of two days and five hours on the phone I attempted to contact Sprint Corporate Security. I was shuffled from department to department so much that I have a detailed map of the phone tree. Only two people took interest in my problem: one person sent an email to a supervisor who never got back to me for more details, and another in Level 2 support tried to find someone who could help. Oh, well, one other person did offer to send me over to technical support so they could "block the email."
Sprint's fraud department told me that it could only act if my account had been used for fraudulent purposes such as unauthorized charges or phone calls. The fact that my private customer information, and possibly other customers', may be compromised did not raise any hackles in fraud.
At the behest of the Florida Department of Law Enforcement, I have filed a complaint with IC3, the Internet Crime Complaint Center, a joint between the FBI and the National White Collar Crime Center. At this time I have not heard anything else back and remain disturbed by the situation.
Random? (Score:2)
Oh, and I love the domain (and the site), so I just had to check on dh0.info too. Somehow, I should have expected it.
Re: (Score:2)
Were it not that this particular email address was especially formulated for SprintPCS to use, and not given out or shared with anyone else, I would say that that the probability of a randomly generated attack would be high. But the probability decreased when I found that other SprintPCS customers had also received the spam, and that two of them used similar spam-tracking tactics. Then there's the time-frame of receipt of the emails.
When these emails were first reported to me, I was not overly s