IMPORTANT! Have you received an email to your forum username?

my_gorgeous_ellie-belle

Ughhhh forget what i just said about FB lol - looks like i'm signed up (no idea how as i do my best to decline all of those silly apps) now off to find out how to remove it :P Facebook is the scary one for me....so much can go wrong.

angelflower_2

Yep, I have received this also - spam folder collected it for me.

My MSE username is unique to this site - my email address is different to my username.

Kev64

I'm really quite angry with the breach. I jealously guard my real email address to stop it getting out there on spam lists. I had initially thought that these spammers were somehow managing to send messages to forum users via the 'Private Message' function here, but having closely examined the email header, I can see that it hasn't come through MSE's servers, but directly from the spammers. This can only mean they have somehow managed to break into the MSE servers and harvest everyone's email addresses.

This is a serious breach. Thank God we don't have any credit card details stored on here. I think some kind of explanation is in order from MSE. Why isn't there any mention of the security breach on the MSE front page ??
What about people who don't frequent the forums often ?

Doc_N

Kev64 wrote: »

I'm really quite angry with the breach. I jealously guard my real email address to stop it getting out there on spam lists. I had initially thought that these spammers were somehow managing to send messages to forum users via the 'Private Message' function here, but having closely examined the email header, I can see that it hasn't come through MSE's servers, but directly from the spammers. This can only mean they have somehow managed to break into the MSE servers and harvest everyone's email addresses.

This is a serious breach. Thank God we don't have any credit card details stored on here. I think some kind of explanation is in order from MSE. Why isn't there any mention of the security breach on the MSE front page ??
What about people who don't frequent the forums often ?

Well said - how long before this hits the Press?

toniq

Hi, I've seen Mse being talked about on a few sites, about a virus

http://www.money.co.uk/article/1006093-has-money-saving-expert-been-hacked.htm

Misco have also warned on their Fb page about Mse being virused.

I'm guessing it's gonna be all over the net very soon x

Marru

I got that email as well to an email address that I used to use for the mse emails. I changed emails couple of months ago.

anguk

I got this email too at 1.36pm, I read it and thought it seemed a little odd and at first thought it was from here until I realised it was from the very similar sounding "moneyexpert". I would never download a .zip link in an email so didn't click the link.

23n1th

Kev64 wrote: »

I'm really quite angry with the breach. I jealously guard my real email address to stop it getting out there on spam lists. I had initially thought that these spammers were somehow managing to send messages to forum users via the 'Private Message' function here, but having closely examined the email header, I can see that it hasn't come through MSE's servers, but directly from the spammers. This can only mean they have somehow managed to break into the MSE servers and harvest everyone's email addresses.

This is a serious breach. Thank God we don't have any credit card details stored on here. I think some kind of explanation is in order from MSE. Why isn't there any mention of the security breach on the MSE front page ??
What about people who don't frequent the forums often ?

What about those that aren't computer savvy and trustingly download the file because they dont come here often.

Some explanation and an apology might go a long way.

moneyexperthaydock

bagand96 wrote: »

I guess this is stating the obvious, but in MSE's investigations have the people at MoneyExpert.com been contacted?

Having looked at the site it seems a run of the mill comparison site. Probably not impartial, granted, but seems genuine, in as much its not a scam or malicious.

As alluded to in previous posts, I would suggest this is an attack based on the MSE user database, using the name of MoneyExpert.com. I doubt Moneyexpert.com were involved in any way, and are probably a victim as much as MSE itself is.

I work at Moneyexpert and just want to confirm that this has nothing whatsoever to do with Moneyexpert.com or defacto, a partner of ours. We have been in touch with MSE throughout the day and I know they are doing everything thay can to get to the bottom of it. Whatever you do, please do not click on the link.

MothballsWallet

I haven't received one - yet. If I do, I'll update.