Account hacked

[petitgateau]

Someone hacked my account and used my points to get $200 cash rewards. Customer service says I’m not the only one.

[KatieBT]

@petitgateau and @GG84 thanks for bringing this to my attention. I have reported these issues and we are investigating.

[GG84]

@petitgateau Did this happen today?! My account someone redeemed a $100 reward also. I was on here at that time posting about samples, how is that possible??????????!!!!!! @SephoraBIC @KatieBT I just changed my password and checked my CC. The reward hasn't been used I dont think? 

[petitgateau]

Yes, today, this morning. 

[petitgateau]

Mine happened after I got an email from Sephora saying my email had been changed. I didn’t make that change so I called them. First employee gave me completely wrong information and “reset” my account.  Five to ten minutes later my points were gone and redeemed for two $100 cash rewards. It took two more phone calls and nearly two hours of my time to get my points back, but the company is out $200 and has info on the fraudulent email and no one seems to care one bit about the actual hack!  I have no faith in Sephora’s internet security at this point and will limit myself to cash purchases in store in the future. 

[RGbrown]

@petitgateau

That sucks. I understand that your knee jerk reaction is to blame Sephora, but I highly doubt this is their fault. Yes, it is possible that Sephora was hacked today, but the better bet (99.9% IMHO) is that your info is circulating on hack lists from other sources from weeks, months, or even years ago, and was used today to access Sephora.  If you got an email stating that your email had been changed, that's because *someone else* had your email and password and was able to make the switch. If you are using the same password on any other site, you need to change it now. Delete cc's that you may have stored on other sites with the same password. Be as proactive as you can now...trying to chase down lost accounts after the fact is no fun, and you'll spend way more than 2 hours on the phone trying to clear it up across multiple sites.

@GG84 you might be interested in this too

[petitgateau]

Appreciate your advice and input. Respectfully disagree with the characterization  of my concern as knee-jerk. I don’t know how or why the hack occurred; I was told it affected others on the Sephora platform besides myself across various email domains. So I thought I would mention it to others here in case it might have happened to them, too. My disappointment was over the disinterest of any of the three people I spoke with about following up with the actual fraud. That does make me worry about the company’s commitment to online security. As you and others have suggested, however, ultimately it is my responsibility to protect myself so I will be proactive against future by not keeping any PII  or financial information on file and following the other suggestions offered. 

[GG84]

@RGbrown I called Sephora my issue was immediately resolved and they are going to watch my account for further suspicious activity. I change all my passwords constantly. I'm okay with the resolution. 

[keelybt]

@petitgateau @GG84 I'm so sorry this happened to you! Please be assured that this information has been reported to our fraud team, so they can investigate further. If you have any other questions or concerns, please feel free to send me a PM. 

[RGbrown]

@petitgateauUnidentified

I'd suggest stronger passwords and not using the same password for multiple sites. Once your password is in a hacker's hands, no other account of yours anywhere is safe. I went through a similar situation a few years ago and it was a mess trying to get all of my accounts back under my control. They literally take your email and password for one site and start trying that combo *everywhere*. I had to cancel credit cards, because of course they like shopping sites the most, but I also lost stupid things like a free pizza at Domino's and my account at SlickDeals (which has absolutely zero value at all...I'm still scratching my head over that one).

Hacks happen everywhere, every day. It's up to you to protect yourself.

[petitgateau]

Honestly the strangest thing was how little the company seemed to be bothered by the fraudulent activity. I probably won’t order online or keep any credit cards on file with Sephora anymore. 

[TrysBeautyItems]

Never keep cc's on file, with any retailer. Sure it's convenient, but convenient to charge to, especially if the retailer doesn't ask to verify cc numbers every transaction.

[petitgateau]

Good advice, thanks