Luckily, I just updated all my orders yesterday before the hacking took place. There was only 1 order present yesterday, and it was taken off the site, and stored in my personal records before the hacking took place. Also, it was a paypal order, so the only information the hacker could have gotten, was the persons paypal address. And he would still need to somehow get that persons password, before accessing their paypal account. So no real damage was done.If you have the IP and you think it wasn't spoofed go to the ISP and find out who had that IP at that time, and do it quick before any logs they may have get dumped. If you can track that down and any negative posts on CA about you or your company from that IP you have atleast a start of a case. If the person was dumb enough to do it from their own machine/network with no spoofin/hoppin they deserve to be caught. You have an uphill battle if you actually wanna prosecute though, getting somebody to rat would probably be helpful.
You don't store cc#'s anywhere on your site do you? Can you prove that the person didn't have access to your site while any orders were put through? You might want to advise all your customers about this to keep an eye on their CC statements for a while.
I am VERY aware.i got the reduced prices email too.
i also saw some trash talk on cs.org about all of you guys.
Sorry to hear that happened. Pisses me off that people have no problem now days attacking someones livelyhood.
very, very good adviceHonestly Ben, and I'm just trying to keep you from spending too much time/effort... if no damage was done then you should probably get yourself back up and not worry about going after the person/people who did this. I've been involved in "hacker hunts" and they've all been unsuccessful. IP addresses can be very tricky, they can be easily spoofed and all that...
that information will never hold up in court and in all reality is useless in finding the person responisible.I have already matched the IP Address of the hacker, with the IP Address of someone on a Car Audio Forum..
if it was a hack job there was a static IP (meaning there was a fulltime live connection like dsl or cable or DS1, or DS3 lines) i dont know how good a hack job on a website with the amount of infot hat is on there that can be done on a dial up (dynamic ip. means a new IP is assigned each log on)If you have the IP and you think it wasn't spoofed go to the ISP and find out who had that IP at that time
im a lead programmer for an ISP using radius servers. By way of patriot act we are required to keep logs for a VERY LONG TIME, and have them backed up several times overand do it quick before any logs they may have get dumped. .