AIM Surplus had a data breach

[DRM6000]

I haven't checked my mail yet, but they have a copy of my C&R. Crap .

[stevie]

One of my CC's got hacked last week. Wonder if it was because of this?

[Jimi Jah]

AIM offered me one year of free credit monitoring. I'd rather have a free BCG.

[Bullets&Whitewalls]

I got a letter yesterday. I guess it's the chance we take buying off the net.

[2meterB]

I read through the AR15.com thread, but I did not see any of my concerns addressed:

1) Any indication of how far back of orders they were holding DL imagery?

2) Last I ordered from them, I had a P.O. Box for billing, and all orders shipped to my office; however, my DL would have my home address on it like most other people. So to what address are they sending the letters? (So far, no letter for me but if they sent it to my prior ship-to or P.O. Box, worse still I won't get it but someone else might!)

3) If it's images breached, does that mean that saved PDFs of the order receipts would also have been captured? They aren't specifying what images were accessed.

4) WHY would they hold onto DL images for so long? I get it might be a CYA thing, but they should have purged those files at 6 months max or saved them off their network. Stupid.

.

Similar breaches have happened because images are stored on a webserver, which can be directly accessed (sometimes as easily as finding out where images are stored, and just browsing to the location...) I am absolutely not saying this is what happened with Aim, as I don't know, just one explanation for why only specific data is compromised in a breach.

[Yugo]

[L84CABO]

AIM offered me one year of free credit monitoring. I'd rather have a free BCG.

Note: Several years ago I was the victim of identity theft at my place of work.

They had the Secret Service out to talk to us and everything. At that time, if you were the victim of identity theft, the three main credit reporting agencies were required by law to provide you with free credit reports for a year. I have no idea if this remains true today.

[Bullets&Whitewalls]

Well I think it's more than just the info they stated because my card was shut down. Not because of any charges but because my bank was notified during the week. I called the fraud number and they can't say directly but the dates are close enough that they say it is a good chance it was compromised there and due to that they shut it down. I haven't really used my card much and the last purchase from them I made was a year and half maybe.

[heidad01]

Sorry to hear about all tha hassles you guys have to go through.
I have been looking at the ar uppers at aim's in the last week and was about to order one yesterday. Thanks for the heads up.
Now, there is no way i will type anything of my info on their web site.

[dwtt]

I wonder what the people who bought our house in Fremont must think when they get a letter informing them of this. The thieves who stole this information won't be able to use my info since I moved out of CA, but later returned and all the information on my driver's license is outdated and useless to them.

If Buds Gun Shop gets hacked, then I'll worry.

[CALI-gula]

Similar breaches have happened because images are stored on a webserver, which can be directly accessed (sometimes as easily as finding out where images are stored, and just browsing to the location...) I am absolutely not saying this is what happened with Aim, as I don't know, just one explanation for why only specific data is compromised in a breach.

That's not what I was commenting about. This is something I'm well aware of.

What I was saying is that they aren't specifying what images were accessed.

"Images" can be a lot of things, including PDFs of transactions, rather than just scans of DLs.

.

[KrisDSA]

WTF ? Thanks for the heads up

[Bansh88]

I had a similar thing happen at work from a vendor I used. I fluffed off the email. 3 months later, I had 3 fraudulent charges on the card.

[Bigtls1]

Dang. I ordered from them the first time a couple months ago. Bummer to see this happen.

[SSOUNN]

Wish me luck guys.. Been ordering from Aim for years, I ordered a NiB x39 BCG just a few weeks ago from them, I haven heard or seen anything yet.. And to add, the x39 pistol was a blast to shoot.. =D