Just got this email from Freemans

DiamondGeezer

VIP Member
VIP Member
Joined
Nov 19, 2004
Messages
3,002
Reaction score
166
Location
Bangalore
Sent from Freemans.com <[email protected]>

Dear Customer,

IMPORTANT: Internet Security Warning

This letter is important and requires your immediate attention.
Please read it carefully.

We have recently been informed by one of our service providers that information used to contact customers on our behalf has been improperly accessed by a third party. As a consequence of this attack, information relating to our shoppers was accessed using our service provider's computer systems. Limited information such as name, email address, gender and date of birth was included in the information that was accessed. Postal address information, required by those who commit credit fraud, was not amongst the affected data. Please be assured that at no time were our own computer systems accessed.

It is important to note that no banking information, postal addresses, credit card details or account passwords were held on the database concerned.

Immediate steps have been taken to prevent a reoccurrence and criminal investigations are ongoing.

We use this service provider to send emails to customers and prospective customers on our behalf. This attack involved data held on behalf of a number of internationally-known brand names which are based all over the world. Whilst the attack was not targeted at UK businesses, a number of UK firms have been affected, including Freemans.

It is not known how many such incidents there are globally but, as a responsible business, we expect our service providers to inform us in the event of a successful attack. We believe it is right to tell you when such an attack happens and to give practical guidance on how to protect yourself.

As a consequence of this, it is necessary to warn our customers of the potential risks they might face, and to help all our customers protect themselves in the future. Industry experts report that attacks such as the one we describe are becoming more frequent and increasingly sophisticated. “Phishing” or hoax emails to individuals are becoming increasingly commonplace. The individuals behind this type of criminal activity may try to obtain personal and credit or debit card details by impersonating well known brands. They may use illegally-obtained information to encourage future victims to disclose further information that will enable them to target, for example, their victim's bank account.

What do I need to do?

• Make sure your computer has current anti-virus and anti-spyware software.

• Ensure you have up to date firewall software.

• Always install the latest security upgrades.

• Carry out regular scans of your computer.

• Change your passwords regularly.

• Always be careful about disclosing your personal details.

• Visit our website and click on the "security" link. Full details are below.

• Be as well informed as you can be. Please see "Online Safety Advice", below.

• Above all, be vigilant. Provided you take simple steps to protect yourself, internet shopping is both
convenient and safe.

Please be assured that we will never contact you or send emails asking you to provide personal information or to confirm your security details online. We would strongly advise you not to respond to any emails or websites that ask you to do so. If you are asked to do so by someone claiming to represent Freemans, it is not a legitimate request and you should not respond or provide any information to them. Please refer to the online safety advice, below.

Online Safety Advice

For advice on how to protect your identity online and to identify potentially fraudulent websites or emails we strongly recommend you visit Get Safe Online, a highly informative UK government-backed website with advice on what to do to avoid online fraud. Their website address is [getsafeonline.org].

If you suspect that you have received a “phishing” or hoax email you should delete it immediately without responding.

If you have any concerns or questions please click on the “security” link on our homepage at www.freemans.com and follow the link to “internet security” where you will find more information and frequently asked questions. If you don't find the answer to your question there, please do not hesitate to contact us free of charge on 0800 313 313*. Lines are open every day between 8am and 8pm. Please note this line is only open for enquiries about data security matters and will remain in place until the end of March 2011.

Your online security is important to all of us and Freemans is committed to the fight against online crime.

Yours sincerely,

John M Skews
Head of Security
Freemans Plc and Grattan Plc

*Calls are free from a BT landline. Calls from other network providers may vary.

Authorised and regulated by the Financial Services Authority
 
Last edited by a moderator:
'Dear Customer' and not your name? rubbish if u ask me. Also, email doesn't look right.
 
Looks a bit spammy to me, seems a few people have had it though. I killed that first link in case it is spam.

Too long winded, "Head of security" doesn't sound right...

You could check the email header to see where it has come from.
 
Hmm just done a google search on that email and it does point towards freemans.If your not too sure mate give them a ring.
 
Hmm just done a google search on that email and it does point towards freemans.If your not too sure mate give them a ring.

On a phone number different to that one above ;).

Interesting if it is real, proper warning emails are looking more like spam!
 
Heres the header (I've removed my email address)


From Freemans.com Thu Mar 3 11:31:09 2011
X-Apparently-To: @btinternet.com via 217.146.188.114; Thu, 03 Mar 2011 11:32:34 +0000
Return-Path: <[email protected]>
Received-SPF: pass (mta1029.bt.mail.ukl.yahoo.com: domain of [email protected] designates 208.85.49.250 as permitted sender)
X-YMailISG: Ft8LGcocZAq60qIKzLDIKq3TuN1CHJD7n94OLRbjM5GpNS5a
7xb9sDJMpCGFtLf3NBofeRq3NHpDidR2D39k9zB4UBYqI5yN12rH7Ix04wvv
adlN6vKk935KxbUINamFbrAQaexJQFJJfQQjORzCJbKO651FL3k.2YQWAlVM
B78ZmaZjOE.DbaVSIOfXYtaeTTkwc9EN6duWl.UfC2irpbpmjGKaSROA27W8
fZLmcMFnDQVnnDCTQWZYPxm.aPe9BQa2GvpqsSbhD8gcMcIVsv5_kELHsZNL
vjHMr1X6c.EbZU1DcaDWi09jYesI06NZDepUy65Yl.rSKz4RJmmoS_lhQkHf
128xz7uC585Jj4pIe9uDU7WFBzrl4eGlw0Qa5CquwHfwORVnXM1vylUnb2TD
HAerFltZdIqCVw0FHV7vYEGri6VCSpLEHFwQLkGEvTa_fEFlc905A0iO0Upb
lBTlJgRnDpU7_00tQRyZ2yDNJUwy9DC_7kq7aVlZilkY4e0GRWH6mJCpBt5N
mdIsZYS.YzvtF1SvBfckYx2FB6WCmXXEhmrHxDFh1bDKwXef83oKR5EBazn6
dkmSwlQdezbyZRhf9leXZhVpVJPddXS4hg--
X-Originating-IP: [208.85.49.250]
Authentication-Results: mta1029.bt.mail.ukl.yahoo.com from=services.fgh-uk.com; domainkeys=pass (ok); from=services.fgh-uk.com; dkim=pass (ok)
Received: from 208.85.49.250 (EHLO mail09.mkt012.com) (208.85.49.250)
by mta1029.bt.mail.ukl.yahoo.com with SMTP; Thu, 03 Mar 2011 11:32:34 +0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=spop; d=services.fgh-uk.com;
h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe; [email protected];
bh=Pkl9SqT9IgszZ0uDaswQ2+oJfrA=;
b=mp8kCfkvlysZF1SQ+zo4mjs2ou14DtYXEvU2VHl8NBPmsU/QHI3460lZv5V931GS3Mma7kQ18UQ2
EcQZzbsmpg==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=spop; d=services.fgh-uk.com;
b=WvIHyFfsUeLwW6wCGDv1M7ikpTi8Ra0blXthIITfGoswrjOcFSetRRWq3eq6SD6Fbo7E5xqbVfh5
MC39WejrnQ==;
Received: by mail09.mkt012.com (PowerMTA(TM) v3.5r13) id hdtu520iiksg for <@btinternet.com>; Thu, 3 Mar 2011 06:31:09 -0500 (envelope-from <[email protected]>)
Date: Thu, 3 Mar 2011 06:31:09 -0500 (EST)
From: "Freemans.com" <[email protected]>
Reply-To: [email protected]
To:
Message-ID: <[email protected]>
Subject: Important Message from Freemans
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_39957_981613509.1299151829349"
x-mid: 919289
x-job: 919289
List-Unsubscribe: <mailto:[email protected]?subject=Unsubscribe>
x-orgId: 11090
Content-Length: 15628
 
The first IP address is obviously your email as It's a yahoo owned IP (BT email goes through yahoo).

The second IP - X-Originating-IP: [208.85.49.250] - is owned by Silverpop Systems Inc in Atlanta USA and could be Grattans email provider.

Their business is,

Silverpop Systems, Inc. provides permission-based email marketing solutions, strategy, and services. It offers on-demand and Web-based software solutions serving the online relationship marketing needs of various enterprise-level organizations.

The fgh-uk.com address is owned by Grattan Plc,

Domain Name.......... fgh-uk.com
Creation Date........ 2008-12-19
Registration Date.... 2008-12-19
Expiry Date.......... 2011-12-19
Organisation Name.... Grattan Plc
Organisation Address. Legal Department, Anchor House, Ingleby Road, West Yorkshire
Organisation Address.
Organisation Address. Bradford
Organisation Address. BD99 2XG
Organisation Address. -
Organisation Address. GREAT BRITAIN (UK)

Admin Name........... Lee Weighman
Admin Address........ Legal Department, Anchor House, Ingleby Road, West Yorkshire
Admin Address........
Admin Address........ Bradford
Admin Address........ BD99 2XG

It's worth noting though that

Email Search: [email protected] is associated with about 89 domains
Reverse Whois:"Grattan Plc" owns about 201 other domains

The telephone number - 0800 313 313 - seems to have a digit missing at the end.

I would say if you are a customer of any Grattans PLC company, like Freemans, give them a ring on a known number and ask them about th breach.
 
Last edited:
I would say if you are a customer of any Grattans PLC company, like Freemans, give them a ring on a known number and ask them about th breach.

Yeah sorry forgot to say that thanks captin i didnt relise the number so sorry bout that.
 
Back
Top