March 13, 2021, Update: Stripe found the source of this activity. A bad actor had accessed endpoints in Thrivecart’s system, where it connects with Stripe. I alerted Thrivecart to this activity and asked them to collaborate with Stripe. I also hired a developer to ensure my business had not been compromised.
Thankfully, the activity has stopped. Thrivecart has disabled the endpoints. Stripe and Thrivecart are working together to fix this vulnerability so it doesn’t happen to other Thrivecart users.
If you noticed an unauthorized charge, see below for recommended steps.
On February 23, 2021, I was made aware that my name and phone number are being used in a fraud scheme. Charges for $5 are being made fraudulently on people’s credit cards. Banks are denying the charge and alerting the victim that the charge was made by Kathryn Aragon.
First, I want to assure you, it isn’t me. Someone has highjacked my name and contact information to commit fraud.
Second, I’m doing everything I can to help. I’ve reported it to my local law enforcement and the Federal Trade Commission (FTC). I’ve spoken with the FBI and the Secret Service. I’m working behind the scenes to protect my systems from hacks.
If you’re a victim, here’s what you need to do:
- Cancel your credit card if your bank hasn’t already done so.
- Report the incident to your local law enforcement.
- Contact the three major credit bureaus to make sure no other charges have been made, and if so, to have them removed.
- Report the incident on a federal level:
- Change your passwords.
