Knit Picks Credit Card Security Compromised

[siliconsara]

I hate to be the bearer of bad news, but I thought this was pertinent to the community since I believe some of us have purchased yarn and other stuff from Knit Picks.

If you ordered something from the Knit Picks online store from late 2012 to 2013 then you need to call your CC company/Bank post haste to report the card lost/stolen and to see if there are any fraudulent charges.  Someone used a security exploit of the web software that handles transactions to gain access to the consumer database for online orders.  They say even if you did not order from KP recently but in the near past, it is a good idea to report the card you used and check your statements.  I ordered from them a few years back and did not hesitate to report my card and cut it up just now.

Here's the official statement from the CEO.

Here is a guide (unofficial) for those who might have been compromised.

The facebook page for KnitPicks is alive with discussion about this mess.

Comments

[lannamichaels]

I'm 99% certain they're the reason my card was stolen and I haven't received a letter.

I'm more concerned about the fact they had credit card numbers unencrypted on their system in the first place;

I'm seriously concerned about this bit. I love their products, but I'm not sure about buying from them in the future, or doing it without looking into ways of protecting the number from them (or just biting the bullet and getting a card just for buying online).

[synecdochic]

Prepaid credit card, or many card companies will now do single-use numbers (ie, it charges to your card but you can give each retailer a unique, one-use number).