Impulsedriven.net - Hacked or just crap?

[Jay]

I have recently been sent an email from impulsedriven with a serial code for Warhammer 40K : SM

I have looked at the headers and it really is a proper email from them saying they have chanrged my paypal account and here is the download link and key.

But i haven't bought anything from them!

I have looked at my paypal and there is no charges, I log into my impulsedriven account and there is the Warhammer key!

Looking at the forum there are a number of people who have the same issue but also a large number of people who have bough games and haven't been sent their email with the download link or the key to their game.

I find this very odd!

[chuckskull]

Sounds more like a bug tbh, seems keys are going to the wrong accounts from what you're saying. They don't seem to be aware of it from what I can see. Probably get picked up on Monday. I'd shoot them a support ticket, with what you've said here, so you don't get charged, just in case and move on from there.

[Jay]

Yes, I send a support email as soon as I noticed the order.

[Pob255]

Sounds like a severe database up

Keep us informed about how they handle this up, as their handling of it will show what they are really like as a service.

[Jay]

wow this could be fraud on an account and no reply from the forum or the support ticket system. No one must look at it on the weekends!

[Jay]

Still no response on this, pretty poor to be honest.

[Pob255]

it does sound like their data base is messed up so it's sending the game codes to the wrong person.

I bet there are some people running running round like headless chickens at impulsedriven

and yes could well be that no one was working over the weekend.

[Jay]

Still no real feedback for anyone on the forums about this and my ticket it still unanswered.

[Jay]

Still nothing, no feedback on what happened. they said my computer must have had a virus and thats how they got into my account

Funny thing is I haven't used that account for about 2 years (maybe more) I don't have any of their software installed anymore and who ever it was bought me a game with their own cash! ( I never paid for it any way)

Very dodgy if you ask me.

[chuckskull]

That's outstandingly poor. Not really much else you can do. I'd be tempted to strip all my payment details from their site/kill my account though.

[Jay]

I have ben sent this PM on their support forums

Here are some facts:

Currently, we do not believe any of your financial data was compromised, only your account.
Accounts are being used to make fraudulent purchases using other fraudulently acquired means of payment.
There appears to be no connection between the compromised Impulse accounts and any of the fraudulently acquired payment forms.
In all of these transactions that we have caught, the Impulse account holder is NOT being charged

Any games you had activated to your account will have been removed. You are not liable for any charges associated with your account. We've been working diligently with PayPal and our other partners to ascertain where things were taken from.

Hope this answers any questions.

Thanks!

[chuckskull]

That's something, at least it seems to be resolved. Taking over a week is pretty shocking though.

[Jay]

Yes, it does look like their database was compromised and passwords where poorly secured.