IMPORTANT! Have you received an email to your forum username?

my_gorgeous_ellie-belle

OAP1945 wrote: »

Thankyou young man/lady I did what you told me to and it has gone, is that all I need to do ? many thanks

Yup - all done, nothing else

tara747

Toe-Jam wrote: »

I don't think it is a case of the Usernames being Leaked or Sold, all someone has to do is click on Community > Members List, and there is the list of every single member of the site to cut and paste.

And our email addresses?????????? :eek:

mikeyk_2

Toe-Jam wrote: »

I don't think it is a case of the Usernames being Leaked or Sold, all someone has to do is click on Community > Members List, and there is the list of every single member of the site to cut and paste.

So how did they email you then? As far as I know sending an email to 'mikeyk' would come back as 'recipient unknown'.

Email me and prove me wrong.

skintbuttrying

Well said.

I got the email as well and thought it so important that I emailed Martin directly. What did i get?...... ......an automated response referring to a load of FAQs and how to access forums, register etc.

MSE is responsible for the breach in security and I know that they are working on it but we must all appreciate that this is serious.

Browntoa

if anyones particularly worried that they have opened the file and infected their PC , or just want to be sure then go to this thread

https://forums.moneysavingexpert.com/discussion/133269

read post 2 and follow the instructions for Malwarebytes

if it finds any infection then start a new thread here

http://forums.moneysavingexpert.com/forumdisplay.php?f=29

and post the log file that malwarebytes produces at the end

one of the techies will advise you on what to do next

(all the software is free)

Keith

Tell a lie, I got it twice - 2 different usernames.

FraudBuster

The headers from mine:

Return-Path: vivario@ server.webconsult.no
Received: from mtain-mi04.r1000.mx.aol.com (mtain-mi04.r1000.mail.aol.com [172.21.131.162]) by air-de01.mail.aol.com (v129.4) with ESMTP id MAILINDE011-5ea24ce37774306; Wed, 17 Nov 2010 01:34:28 -0500
Received: from server.webconsult.no (unknown [72.34.32.139])
by mtain-mi04.r1000.mx.aol.com (Internet Inbound) with ESMTP id 994EF3800004E
for xxxxxx[EMAIL="xxxxxx@aol.com"]@aol.com[/EMAIL]; Wed, 17 Nov 2010 01:34:28 -0500 (EST)
Received: from vivario by server.webconsult.no with local (Exim 4.69)
(envelope-from vivario@ server.webconsult.no
id 1PIbbA-0001XT-65
for xxxxxxx[EMAIL="xxxxxxx@aol.com"]@aol.com[/EMAIL]; Wed, 17 Nov 2010 07:34:28 +0100
To: xxxxxxxx[EMAIL="xxxxxxxx@aol.com"]@aol.com[/EMAIL]
Subject: From MoneyExpert to FraudBuster

From: [EMAIL="business@moneyexpert.com"]business at moneyexpert. com[/EMAIL]
Message-Id: <E1PIbbA-0001XT-65@ server.webconsult.no
Date: Wed, 17 Nov 2010 07:34:28 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.webconsult.no
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [32201 32202] / [47 12]
X-AntiAbuse: Sender Address Domain - server.webconsult.no
x-aol-global-disposition: G
x-aol-sid: 3039400cdecc4ce377745e30
X-AOL-IP: 72.34.32.139
X-Mailer: Unknown (No Version)
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

SugarSpun

FATBALLZ wrote: »

It's misleading to imply that only people who don't understand internet security would be worried, I understand it and it looks pretty obvious that MSEs databases have been compromised, and from some of the other posts this isn't a one off. This spam email in itself isn't something to worry too much about but it's also quite likely people's passwords could have been taken, the explanation about 'double encryption' isn't reassuring in the least.

I was only talking about what someone else suggested was an overreaction on the part of the people who aren't understanding the technical side of the conversation.

I'm concerned and annoyed that my email address has been compromised, but since I have good spam filters, my own domain name complete with all the good stuff, and know not to click on dodgy links I'm mostly just annoyed. If I didn't understand how a Trojan worked and had opened the email (but not the zip) I'd probably be frantically backing up all my photos and doing an hourly system scan. And presumably asking for advice and wondering why the MSE techies weren't online to help.

If people are concerned that their MSE passwords have been compromised it's time to change the password, and if the password's the same as their email password it's a good reminder to change that too and to a different password.

Tigsteroonie

SugarSpun wrote: »

If people are concerned that their MSE passwords have been compromised it's time to change the password, and if the password's the same as their email password it's a good reminder to change that too and to a different password.

Which I have done, following today's happenings

Violetta_2

I don't mean to come over all "conspiracy theorist" but it seemed a bit odd that this happened just over 24hrs after this was posted Please look after your privacy now that does seem more connected with forumites publishing personal info, so maybe I'm adding 1+1 & getting 6.