WARNING: Naps Customer Database Compromised

[drrvca]

I've read through the pages on this thread and wanted to chime in. I've seen the list of names and accounts hacked and downloaded the huge ass file(s) myself. Well over 200,000 line items. Some are repeats and some are one timers. However I did give my buddy a scare of his life. He was just about to place another large order ($5k worth) with Naps and before he did I told him about the hack. He didn't believe me until i repeated his address, the address he used to ship goodies to, his account number and routing number from his bank. Not to add the exact date and times he ordered and how he paid each time. After he literally turned white as I was standing there, he thanked me and has since been spreading the word to others who have bought from them in the past. What a joke of a supplier. Out of the millions they make you would think they could spend a few thousand on protecting their servers. Maybe its more than a few grand. I have no clue as I am not an IT guy but you get my point.

 

[Gramps]

It wasn't an outside attack. It was as simple as an employee putting the information public. All of the talk about hacking, bank level security, etc, was an attempt to divert attention away from the simple fact NAPS has employees that will sell user information.

 

[bickel29]

I've read through the pages on this thread and wanted to chime in. I've seen the list of names and accounts hacked and downloaded the huge ass file(s) myself. Well over 200,000 line items. Some are repeats and some are one timers. However I did give my buddy a scare of his life. He was just about to place another large order ($5k worth) with Naps and before he did I told him about the hack. He didn't believe me until i repeated his address, the address he used to ship goodies to, his account number and routing number from his bank. Not to add the exact date and times he ordered and how he paid each time. After he literally turned white as I was standing there, he thanked me and has since been spreading the word to others who have bought from them in the past. What a joke of a supplier. Out of the millions they make you would think they could spend a few thousand on protecting their servers. Maybe its more than a few grand. I have no clue as I am not an IT guy but you get my point.

Bank routing number? Your buddy was using his bank account to pay?

That, along with the fact that your buddy is/was ordering $5k orders scares me for his future as a free man. I could be wrong, but I would think that if customs stumbled across an order that large, it would scream "Dealer" and that it would increase your chances of receiving more than just a letter?

 

[Reddog82e]

It wasn't an outside attack. It was as simple as an employee putting the information public. All of the talk about hacking, bank level security, etc, was an attempt to divert attention away from the simple fact NAPS has employees that will sell user information.

Yes 100% inside job as they are packs combined from a sql database export.

 

[drrvca]

It wasn't an outside attack. It was as simple as an employee putting the information public. All of the talk about hacking, bank level security, etc, was an attempt to divert attention away from the simple fact NAPS has employees that will sell user information.

I can't argue that. I actually have no facts as to who did it or how it was released. If it was an inside job I wonder if the person was paid off by a competitor of naps or was paid of by authorities? Do we really know if it was an inside job or not?

 

[drrvca]

Bank routing number? Your buddy was using his bank account to pay?

That, along with the fact that your buddy is/was ordering $5k orders scares me for his future as a free man. I could be wrong, but I would think that if customs stumbled across an order that large, it would scream "Dealer" and that it would increase your chances of receiving more than just a letter?

That's what blows my mind actually. He received seizure letters more than once but his order was split up in to so many damn boxes that if they took one it would account for a small portion of his order. Then he would request a reship and they would reship it.

Yes he used his account number one time to wire money to his naps wallet vs using money gram since he was having problems with money gram at the time.

Here is what I don't understand. If the authorities wanted to bust someone I would think a seizure letter would be worse than having this "hackers list" revealed. I mean on a seizure letter they have your damn address and know exactly what's inside. Wouldn't be very hard to go to your front door and bust someone that way I would think. So to me a seizure letter would be worse than having my name on this list. Maybe I am looking at it wrong?

 

[bickel29]

Well, IMO, and this really is only my opinion, I personally haven't really worried about anyone in our community getting "busted" bc of that list being released.
My only concern with the list is that it might be used by employers or other decision makers to negatively affect someone on that list. And even that is a stretch bc it could have been someone else ordering under the person on the lists name, and by this point, you can't really prove WHAT was ordered.

But I haven't believed, and do not believe that anyone on that list was at risk of the Feds knocking down their door. The evidence would most likely long be gone, and I just don't see the DEA saying "looks like this guy ordered steroids a year and a half ago, let's go raid him". I would think that at worst, the name and addy of anyone appearing MULTIPLE TIMES on that list might be added to a watch list, and future packages going to that addy might get scrutinized.

Again, this is just my opinion, I could be way wrong. Also, I guess it's easier not to worry when you're not on that list.

 

[Gramps]

Having your name on the list is one more piece of evidence in a court case, for one example. Having your name next to a large order could place a target on your back if LE were so inclined to focus on it. Will either hold up with a publicly released list alone? No, but the larger the stack of paper trail, the worse life can be.

 

[Big_paul]

I've read through the pages on this thread and wanted to chime in. I've seen the list of names and accounts hacked and downloaded the huge ass file(s) myself. Well over 200,000 line items. Some are repeats and some are one timers. However I did give my buddy a scare of his life. He was just about to place another large order ($5k worth) with Naps and before he did I told him about the hack. He didn't believe me until i repeated his address, the address he used to ship goodies to, his account number and routing number from his bank. Not to add the exact date and times he ordered and how he paid each time. After he literally turned white as I was standing there, he thanked me and has since been spreading the word to others who have bought from them in the past. What a joke of a supplier. Out of the millions they make you would think they could spend a few thousand on protecting their servers. Maybe its more than a few grand. I have no clue as I am not an IT guy but you get my point.

It has been a bad experience all the way around. Just think if you are going through a divorce, child custody battle and your ex caught wind of it. Bad day at black rock.

It's is obvious there was very little concern for the safety of their customers. I learned.

 

[bickel29]

It has been a bad experience all the way around. Just think if you are going through a divorce, child custody battle and your ex caught wind of it. Bad day at black rock.

It's is obvious there was very little concern for the safety of their customers. I learned.

Having your name on the list is one more piece of evidence in a court case, for one example. Having your name next to a large order could place a target on your back if LE were so inclined to focus on it. Will either hold up with a publicly released list alone? No, but the larger the stack of paper trail, the worse life can be.

I want to be clear that I am in no way trying to minimize how disappointing it is that Naps allowed this to happen.

But Big Paul, under your scenario, with the child custody/divorce situation ... I think we all would agree that divorces don't usually happen over night, correct? So if I was planning on leaving the old lady and wanted to harm her character, couldn't I order illegal items under her name, without her knowledge, a few months before leaving her, and then turn around and say "look at these orders I found where my wife ordered illegal items, she is not fit to have custody of our children"? Doesn't there have to be proof that the items ever really existed and were in her possession? Otherwise, any one of us could ruin other people's lives by ordering stuff under their name.

 

[bickel29]

Also, I would ask this. How sure are each of us that the source we use, is in fact not keeping our info? You really believe that each of these sources is deleting your info after each order? Do you really believe that they are always deleting your communications with them? Are we positive that they are always shredding the USPS tracking info?

What Naps did sucks! But I would bet many more sources are STILL doing the same thing.

 

[Reddog82e]

It has been a bad experience all the way around. Just think if you are going through a divorce, child custody battle and your ex caught wind of it. Bad day at black rock.

It's is obvious there was very little concern for the safety of their customers. I learned.

It's propensity evidence at best and can only be used as such and even then because it lacks proper foundation. It has no proper foundation because no one can prove it is what it is. As such it just becomes propensity for possible character basis. But again you can get it removed with lack of proper foundation. Also unfairly prejudicial, competency, character evidence. if that doesn't work demand original unaltered documents. But odds are whoever would be fucked for something else not this.

 

[drrvca]

Also, I would ask this. How sure are each of us that the source we use, is in fact not keeping our info? You really believe that each of these sources is deleting your info after each order? Do you really believe that they are always deleting your communications with them? Are we positive that they are always shredding the USPS tracking info?

What Naps did sucks! But I would bet many more sources are STILL doing the same thing.

Very very good point.

 

[drrvca]

I've read through the pages on this thread and wanted to chime in. I've seen the list of names and accounts hacked and downloaded the huge ass file(s) myself. Well over 200,000 line items. Some are repeats and some are one timers. However I did give my buddy a scare of his life. He was just about to place another large order ($5k worth) with Naps and before he did I told him about the hack. He didn't believe me until i repeated his address, the address he used to ship goodies to, his account number and routing number from his bank. Not to add the exact date and times he ordered and how he paid each time. After he literally turned white as I was standing there, he thanked me and has since been spreading the word to others who have bought from them in the past. What a joke of a supplier. Out of the millions they make you would think they could spend a few thousand on protecting their servers. Maybe its more than a few grand. I have no clue as I am not an IT guy but you get my point.

JUST TO NOTE* I WILL NOT SEND THE FILES TO ANYONE WHO ASKS. I have had a few ppl message me asking for the list. That is the last thing I will do. If I send it on to whoever PM's me then I am creating a bigger shit storm and am no better than those who released the info in the first place. So I am sorry but I'm not going to feed the monster.

 

[Volley_Fire]

People on this board who are requesting it likely have a vested, personal interest in the data. This is opposed to randomly disseminating the data, like you think is going to happen. You're the douche that apparently downloaded it just to scare your buddy. GTFO

 

[Gramps]

The requests I've gotten for the file were "I'm in desperate need to know..." from low volume and new members here. I'd like to help those who need it, but the requests I got didn't feel legit.

 

[drrvca]

People on this board who are requesting it likely have a vested, personal interest in the data. This is opposed to randomly disseminating the data, like you think is going to happen. You're the douche that apparently downloaded it just to scare your buddy. GTFO

Yeah that was my intention the whole time. Just to scare him. Yep you got me!!

My intention was to tell those that I knew that they should no longer use Naps. One of which happened to be a close friend I talk with on a daily basis. If you read the post that I wrote CORRECTLY nowhere does it say that I "tried to scare him." Get your facts straight before you go making yourself look like an idiot. Him being scared was his reaction to me warning him not to order and me proving to him that the list was real. You word it as though I sat in my room just praying for the chance to screw with a close friend of mine. The others on the list that I have notified I was not trying to scare either. It was my full intention to warn them to steer clear of this source. They were all pretty freaked out and pissed at Naps.

O yeah...YOU JUST SENT ME A PM ASKING FOR THE LIST. NO WONDER WHY YOUR UPSET.

 

[drrvca]

The requests I've gotten for the file were "I'm in desperate need to know..." from low volume and new members here. I'd like to help those who need it, but the requests I got didn't feel legit.

Same here. Just wanted to see if their name was there.

 

[Kakarot]

People on this board who are requesting it likely have a vested, personal interest in the data. This is opposed to randomly disseminating the data, like you think is going to happen. You're the douche that apparently downloaded it just to scare your buddy. GTFO

I downloaded the list as well but I'm not sending it to anyone I don't know in real life. So you GTFO! Shit needs to be buried deep. What's stopping the next guy that gets ahold of it from running a smear campaign on Facebook or something worse.

 

[drrvca]

I downloaded the list as well but I'm not sending it to anyone I don't know in real life. So you GTFO! Shit needs to be buried deep. What's stopping the next guy that gets ahold of it from running a smear campaign on Facebook or something worse.

Exactly. This character sends me a PM for the list. I say no. Now I'm a douche lol.