Bookatrack Scam

[neil]

Just in case anyone gets the text and not the email... I've just had the following email through from Bookatrack, closely followed by the Scam text they mention:

We have just been made aware of a scam SMS text message that has been sent purporting to be from BookaTrack, offering a free track day in exchange for confirmation of bank/card details. PLEASE DO NOT RESPOND to this text or click the link - it is a scam.

We are currently investigating how this data breach has occurred but early indications are that it has come from an old web server which was incorrectly decommissioned.

If you have already completed the online form you will need to contact your bank/card issuer ASAP to let them know your card details have been compromised.

Please accept our sincere apologies for this inconvenience and be assured that we take data security very seriously, we have a fully PCI-DSS compliant server and no credit card details are stored on our servers.

For more details about any of the above just send us an email.

Kind regards,

Jonny, Sarah and the BaT Team

[Sanjøy]

Looks like they have had their whole database compromised. Mobile numbers, car details & addresses etc. Latter being of most concern.

Very targeted attack and subsequent phishing site.

[tut]

snap........

tut

[mxvx]

I really hope no one falls for this

[Ferg]

That's not good. Hope they get the new servers pen tested. PCI DSS doesn't give two sh*t about personal data.