[arrl-odv:21931] A day in the life

You never know what life has in store for you. Yesterday morning the staff came into the office to discover that the ARRL donation form was being used by a rather sophisticated operation to test stolen credit card numbers by making, or attempting to make, thousands of small donations. Of course this swamped our system and set off alarm bells at our credit card processing vendor, which responded by shutting off our service briefly and threatening to shut us off for even longer periods. Locking out the IP address from which the operation was being mounted didn't help; they just switched to a new IP address and carried on. Nor would implementing a minimum amount help; while most of the attack involved transactions of a dollar or so, some went as high as $100. For now we have solved the problem by moving the donation form into the members-only section of the website. This isn't a perfect solution - most, but not all, donations come from members and not all members are logged in when they attempt to make a donation - so we hope to be able to move it back eventually. In the meantime our processing vendor is happy with us again. Unfortunately, for the next few weeks we will have people calling to find out why "we" have charged their credit card and we'll have to give them the delightful news that their card has been compromised. 73, Dave K1ZZ
participants (1)
-
Sumner, Dave, K1ZZ