Comments on: Performancing.com user database ends up where it doesn’t belong

By: Robert Lo

Robert Lo — Fri, 15 Jun 2007 01:00:12 +0000

Hi here,
This is Robert Lo, and the shaw email address is my personnal email address. Ok, the followings are truth:
I live in Alberta, Canada now.
I was born in Hong Kong.
I studied at UoL (UK)
Other than that, I do not know delixicompany_agent@yahoo.co.uk, Delixi Global Resources, and Performancing.com, and I do not contact you any part time job.
Now, I do not know is it my pc, my isp ,or performancing.com get hacked

cheers,
RL

By: Fanis

Fanis — Tue, 12 Jun 2007 19:15:22 +0000

Got a spam on my performancing email too, from REV. RICHARD CLAMPTON” (but actually revrichardclampton@terramail.com.sv), mailed from a polish host. *sigh*

By: links for 2007-03-23 at Past is prologue

links for 2007-03-23 at Past is prologue — Fri, 23 Mar 2007 19:26:52 +0000

[...] Performancing.com user database ends up where it doesn’t belong Nice one Pascal (tags: spam performancing) [...]

By: Bas

Bas — Mon, 19 Mar 2007 14:00:58 +0000

After some comments on the Perfomancing Members Forum, my account has now been closed.

Is Performancing (turning) EVIL?

By: chad

chad — Thu, 15 Mar 2007 21:10:17 +0000

I had the same thing happen. 1 to 1 email for each signup I ever do. Performancing to date is the only one to have been spammed. They sold the list. Pure and simple.

By: Alder's Tone

Alder's Tone — Tue, 06 Mar 2007 22:04:09 +0000

Same thing happened, thanks for the PM Pascal. Performanicing didn’t have the decency to respond when I questioned it.

My opinion of performancing’s handling of user data isn’t positive. How would they feel if their bank let slip their personal details like this?

By: Pascal

Pascal — Tue, 06 Mar 2007 00:00:36 +0000

Another one today - but I guess I cannot make any claim any more since I published how I form my email addresses ;-) :

Return-Path:
….
Received: from imf22aec.mail.bellsouth.net (imf22aec.mail.bellsouth.net [205.152.59.70])
by mx.mailprotect.be (8.13.4/8.13.4/Debian-3sarge1) with ESMTP id l25KrWRe011442
for
; Mon, 5 Mar 2007 21:53:33 +0100
Received: from ibm65aec.bellsouth.net ([192.168.16.253])
by imf22aec.mail.bellsouth.net with ESMTP
id <20070305205327.PIPG13228.imf22aec.mail.bellsouth.net@ibm65aec.bellsouth.net>
for
;
Mon, 5 Mar 2007 15:53:27 -0500
Received: from mail.bellsouth.net ([192.168.16.253])
by ibm65aec.bellsouth.net with SMTP
id <20070305205326.EVEF21542.ibm65aec.bellsouth.net@mail.bellsouth.net>;
Mon, 5 Mar 2007 15:53:26 -0500
X-Mailer: Openwave WebEngine, version 2.8.16.1 (webedge20-101-1106-101-20040924)
X-Originating-IP: [72.36.218.138]
From: Uk National Lottery
Reply-To: claimsoffice_martincole@yahoo.co.uk
To:
X-ASG-Orig-Subj: Congratulations You have won =?ISO-8859-1?B?ozUwMCwwMDBHQlAhIQ==?=
Subject: Congratulations You have won =?ISO-8859-1?B?ozUwMCwwMDBHQlAhIQ==?=
Date: Mon, 5 Mar 2007 15:53:26 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <20070305205326.EVEF21542.ibm65aec.bellsouth.net@mail.bellsouth.net>

The National Lottery
P.O.Box 17,
Kempsford GL7 4WZ
London.
UNITED KINGDOM
(Customer Services)
Date: 5th of March 2007

FROM:UK NATIONAL LOTTERY
TICKET NUMBER: 74454774
SERIAL NUMBER: 144-66584
BATCH NUMBER : BT-4478474121P

AWARD FINAL NOTIFICATION:
We happily announce to you the draw (#999) of the UK NATIONAL LOTTERY,online Sweepstakes International program held on the 3rd of March 2007. You were entered as dependent clients with: Reference SERIAL NUMBER:
144-66584 and Batch number BT-4478474121P.

Your email address attached to the ticket number: 74454774 that drew
the lucky winning numbers:

Bonus Ball [38] which subsequently won you the lottery in the 2nd category i.e match 5 plus bonus. You have been approved for a payment of
500,000.00 POUNDS (FIVE HUNDRED THOUSAND Pounds Sterling.) in cash credited to file
reference number:UKL/K5598/U4.This is from a total cash prize of
five million pounds shared among the ten international winners in first
categories.

All participants were selected through a computer ballot system drawn
from 50,000 (Fifty thousand) names of email users around the world, as
part of our international promotion program. Due to mixed up of some
names and addresses,we ask that you keep this award personal, till your
claims has been processed and your funds remitted to you.This is part
of our security measures to avoid double claiming or unwarranted taking
advantage of the situation by other participants or impersonators,You
are to contact our accredited agent for your winnings.

SIR MARTIN COLE.
UNITED KINGDOM LOTTERY CLAIMS AGENT.
UK NATIONAL LOTTERY SECURITY AGENCY.
E-mail: claimsoffice_martincole@yahoo.co.uk
Tel:+447031820222

He is your agent, and responsible for the processing and transfer of
your winnings to you. YOUR SECURITY FILE NUMBER IS Z-90237-Y�67/U4
(keep personal) Remember, your winnings must be claimed not later than
(13th of March 2007).

Our Lottery agent will immediately commence the process to facilitate the release of your funds as soon as you contact him. You may wish to establish contact via e-mail with the particulars presented above citing the batch and reference numbers to this letter.
Our winners are assured of the utmost standards of confidentiality, and press anonymity until the end of proceedings, and beyond where they so desire. Be further advised to maintain the strictest level of confidentiality until the end of proceedings to circumvent problems
associated with fraudulent claims. This is part of our precautionary
measure to avoid double claiming and unwarranted abuse of this program.

Goodluck from me and members of staff of the UK NATIONAL LOTTERY.

Yours faithfully,
Lou Stradd
Online coordinator for UK NATIONAL LOTTERY
Sweepstakes International Program.
Copyright � 1994-2006 The UK National Lottery Inc.
All rights reserved. Terms of Service - Guidelines

By: Pascal

Pascal — Fri, 02 Mar 2007 00:35:44 +0000

Hello David,

I guess you can’t put the genie back in the bottle now… You probably have seen a similar posting on the performancing forum already?

And yes, I have once had a Linkedin Connection request on my performancing mail address (but I assume that was limited to people who opted in for the “Partners” ad network - my friend, who didn’t sign up for the ad network, hadn’t gotten it).

What you might try is find out how to file a complaint for data theft in Canada? I have heard stories of our local Belgian “internet police” acting very efficiently… With the ip address from the email headers (I get quite some traffic the past few days on searches for this ip address…) Canadian police should be able to track down the owner of the originating machine.

By: David Krug

David Krug — Thu, 01 Mar 2007 09:41:52 +0000

I’ve been researching this as well. I got the same email and I have my suspcions how it happened whether through a linked in email sell possibly, or through a faulty host. Performancing had a rocky hosting history.

I know we take privacy very seriously and I’m sure the old team did as well. Let me know if there is anything I can do to help rectify this situation.

David Krug

By: Douglas Holt

Douglas Holt — Thu, 01 Mar 2007 03:41:38 +0000

I just received one of these same messages this evening. When I Googled the company name {Delixi Global Resources} your post was the first result. I did not use the same trick as above so I can’t be absolutely sure that the spammers obtained my email address from performancing but I did sign up for and use their services last year when they were available. Usually I use the free service at spamgourmet.com to sign up for questionable services so I can tell when my email address has been “bartered” without permission. This most recent event helps convince me that every service I sign up for may have a “questionable” privacy policy. Thanks for pubishing.