My account got hacked

[rmrichesjr]

I'm sure it is, but it still bothers me on principle. I can't find out the status of the breach without giving sensitive information to yet another party.

Ditto. As I just read the email message that appeared to say my data _was_ leaked, I think I'll avoid the third-party page.

[lajackson]

I’m assuming that TrustArc is a third party computer security company the Church is working with regarding the data intrusion.

I'm sure it is, but it still bothers me on principle. I can't find out the status of the breach without giving sensitive information to yet another party.

You could always call the phone number. From the Newsroom statement it seems they hacked the Church Account system and got the information that was entered there. I wonder how they decided who actually got hacked. I did not get an email.

[rmrichesjr]

... I did not get an email.

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

[garystroble]

... I did not get an email.

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

Just think of us who won't get the email to go to Missouri when the time comes too . . .

[rmrichesjr]

Just think of us who won't get the email to go to Missouri when the time comes too . . .

Let's hope this forum is still up and working at that time and that the first person who DOES receive the message posts about it here.

[russellhltn]

From the Newsroom statement it seems they hacked the Church Account system and got the information that was entered there. I wonder how they decided who actually got hacked.

I assume they follow the logs. It may be more detailed then we think. They may have auditing in place to catch employees looking up stuff they shouldn't.

I did not get an email.

Nor did I.

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

Humor noted, but I do get my Ward's weekly email...

[lajackson]

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

I still get those. I think . . .

They may have auditing in place to catch employees looking up stuff they shouldn't.

I doubt that an employee was the cause of this breach. But I do know there is auditing in place and that it works.
(Don't ask, but it was not me. I was merely assigned to interview a member of interest.)

[russellhltn]

I doubt that an employee was the cause of this breach.

I didn't mean to imply anything like that, just one of the reasons why it was there. I've had to dig deeper into SQL than I've wanted to go. If you throw all the right switches, it will record every query made. I think the church is a Oracle shop (or at least was), but I'd expect Oracle to have the same. With logging at that level, it wouldn't be too hard to figure out what was retrieved.

[russellhltn]

I did not get an email.

Nor did I.

It turns out we both got the email - but gmail filed it in the spam folder.

[rmrichesjr]

It turns out we both got the email - but gmail filed it in the spam folder.

Am I the only one who has received multiple such messages to the exact same email address?