WARNING: Naps Customer Database Compromised

[Millard]

[EDIT: The posting of private personal information about AAS users is prohibited on this forum.]

I know the discussion is about a data breach but please note the posting of private personal information about MESO members and suspected AAS users is strictly prohibited on this forum.

 

[Big_paul]

Naps admitted it a week ago on eroids:

View attachment 41391
Source: Source discussions: napsgear.orgpage

They should have done the same here. It only shows a lack of concern for their customers.

If I had placed an order in the last 2 weeks I would have wanted to know. I would not have ordered at this time.

I have never slammed Naps, and have used their service at least several times. My last order was in the last couple years. My name is probably on that list if this is accurate info, and I don't want it there.

Why in the hell would they even keep that information. I can see being on the mailing list, but to keep evidence of a drug transaction is irresponsible to put it mildly.

 

[Big_paul]

I don't entirely believe that its a competitor at this time. Would they admit it if it wasn't.

They should have gotten out in front of this sooner.

 

[Gramps]

Have you even read the website? If you had you would have seen the contents of orders along with order numbers that are easily matched to the buyer.

Believe me, this is nothing to minimize. People are going to be hurt by this.

I'll retract what I said. The file I started with "orders" didn't have this info and the rest appeared to be more business to business related. Again, I've just started poking and am being cautious of the files as well due to unknown malware. No Excel used to read for one.

 

[Dw725]

I have noticed smaller ugl's do not store personal information. There is no need, and they don't have servers storage exc. mostly bigger named have the info stored.
Simple email is most likely deleted faster due to space limitations with secure email accounts.

I've been doing my best to ignore your shit, but fuck man. How could you possibly know that unless u ran one or worked closely with one? Just go the fuck away with your ulterior motive bullshit. You contribute nothing to this thread or the forum for that matter and your rep here is fucked. Every new post u make reinforces that.

 

[Wunderpus]

I have noticed smaller ugl's do not store personal information. There is no need, and they don't have servers storage exc. mostly bigger named have the info stored.
Simple email is most likely deleted faster due to space limitations with secure email accounts.
(Screen shot enclosed) limited storage space prevents the use of keeping personal info.
"That's my opinion" Not a fact. Allways be careful. Wish I knew other ways to protect ones identity wile ordering. @jaymaximus how would you recommend one keeps there identity secure? Any one else have any insight?

The fuck do you know about anything? Nothing, nothing at all. Stop acting like you have some secret knowledge none of us have. You don't know a fucking thing.

 

[Wunderpus]

I don't entirely believe that its a competitor at this time. Would they admit it if it wasn't.

They should have gotten out in front of this sooner.

It makes a lot of sense to me that it IS a competitor... Someone's brother died from their EQ? Come on...

I totally see this is a power move. Expose Naps' security issue, have a database of email addresses, reach out to those addresses in a few months explaining how your lab uses the highest quality encryption services and data dumping... You carry XYZ products... Even if you pick up a small percentage of Naps' customers, it was worth it... Right? Fucking ridiculous no matter WHAT the reason is.... If it's from a competitor, I imagine it will be exposed and more users will be hurt in the process.

 

[napaulm]

i ordered a couple weeks before this came out, only becuz i wanted to try geneza and i dont know where else it's sold
now i wonder if naps sealed this off or if the hacker's still in there gettiing 2016 info.
im not worried tho, le going after a few hundred dollar buys doesnt seem practical.
tho, id be surprised if u can still send to those reciever names. id think le'd send every reciever name to wu and mg and flag em. that would stop most sales.

 

[ThE SiCkNeSs]

Last year I made an order from naps. My first and last order from them. Their receiver got flagged and I had to go back to get my money back from wu. I got the third degree from them and got really sketched out and I said fuck this and ended up canceling my order. Guess what? My fucking name is on that list. This shits got me really stressed out. Fuck naps for saving my info, and fuck this guy for putting hundreds of thousands of people on blast. If his story is true and he lost his brother than I could understand him for bringing naps down. But why put up all their customers? Do you think if his or his brother's name was on that list he still would have done it?


Sent from my iPhone using Tapatalk

 

[Oregongearhead]

Last year I made an order from naps. My first and last order from them. Their receiver got flagged and I had to go back to get my money back from wu. I got the third degree from them and got really sketched out and I said fuck this and ended up canceling my order. Guess what? My fucking name is on that list. This shits got me really stressed out. Fuck naps for saving my info, and fuck this guy for putting hundreds of thousands of people on blast. If his story is true and he lost his brother than I could understand him for bringing naps down. But why put up all their customers? Do you think if his or his brother's name was on that list he still would have done it?


Sent from my iPhone using Tapatalk

Sorry to hear this ....this time Naps is history here . I"ll make sure of it

 

[Wunderpus]

Last year I made an order from naps. My first and last order from them. Their receiver got flagged and I had to go back to get my money back from wu. I got the third degree from them and got really sketched out and I said fuck this and ended up canceling my order. Guess what? My fucking name is on that list. This shits got me really stressed out. Fuck naps for saving my info, and fuck this guy for putting hundreds of thousands of people on blast. If his story is true and he lost his brother than I could understand him for bringing naps down. But why put up all their customers? Do you think if his or his brother's name was on that list he still would have done it?


Sent from my iPhone using Tapatalk

Man, I am very sorry to hear all of this. I wish there were a way for you to be made whole... Naps was ridiculous to assume their data was safe... I genuinely hope this is a lesson to ALL sources out there...

 

[Eman]

@naps / @Naps-Support .... Care to plead your case? Or are you going the "let's say nothing and hope for the best" strategy.

 

[Do3Gs]

Naps may have been the obvious victim of the cyber attack but the biggest victims are the individual AAS users.

Law enforcement action against users probably isn't the greatest concern for individual users although it would be tempting for some grandstanding local prosecutor to do a quick search of all the users in his district.

There are other entities that are far more interested in this data.

Competing AAS sources will make use of the data to spam/scam the customer list. It's a data goldmine for every startup lab and scammer to exploit. Beware.

USADA is already scanning AAS-related forums to catch AAS "cheats" like they did to bust that masters cyclist on the isarm forum. USADA and NADOs will cross-reference the list against amateur/pro athletes in their databases.

Coinbase and Circle could add all the bitcoin addresses to their databases of addresses known to be associated with illegal activity and suspend any user accounts who have sent bitcoin to those addresses.

Professional colleagues, employers, friends, girlfriends, ex-wives, enemies, etc. could also satisfy their curiosity about the unnatural muscle mass of people in their gyms, workplace, classroom, etc. The real-life and social media consequences can be a bitch.

The data breach is the Mossack Fonseca of the steroid world. It's The Moldova Papers.

Instead of a bunch of rich people and corrupt politicians that no one likes, it's a bunch of steroid users that no one likes whose privacy has been violated. And rather than be concerned about the motives and the perpetrator of the attack, everyone is enjoying delving into all the secrets exposed.

If the perpetrator is really a competitor seeking to gain a competitive advantage, the willingness to recklessly and maliciously expose so much individual customer data represents a new low. The data breach represents a major escalation in AAS black market competitive warfare.

Spot on, Millard.

People unfortunate enough to be on that list should be prepared for spam, solicitations from scammers, possible extortion attempts, and who knows what else.

However, this data breach does present a unique opportunity to highlight the importance of preserving anonymity when registering on steroid websites or when purchasing from AAS vendors.

It's not enough to rely on sources to delete customer info or protect data. Users must take responsibility for their own security and that starts by assuming all sources are storing customer data, regardless of their stated policies to the contrary. These people are strangers and shouldn't be trusted, especially with your privacy.

I've listed a few steps that all AAS purchasers should take when ordering AAS from online vendors:

• Customers should always use an alias when placing orders. Real names should never be used.
  
• Orders should shipped to an address that isn't associated with the purchaser.
• A secure email with no personally identifying information and that is dedicated solely to AAS purchases should always be used. No personal use.
• It's highly advisable to conduct all business behind an IP proxy, pgp, Tor, etc.

If anyone has anything more to add, please fell free.

Can't stress this enough when everyone thinks every UGL is their best friend because they completed an order or answered a question.

Protect yourself people. People on this released list are going to lose some stuff they werent expecting when they went to sleep last night.

Just bumping and keeping some key posts from getting buried.

 

[Gramps]

I've been studying these lists this morning. Of the files posted, I don't see any actual reference to items purchased as CBS pointed out. Maybe he's/you're using a screenshot posted? I didn't zoom those so I don't know. The actual files DO have enough to be pissed about, though. Names, addresses, some phone numbers, many bank account numbers... all information that should never be made public. But I still don't see any evidence of actual items purchased that could ever be used against anyone. I'm the most concerned with names being tied to bank transactions by date as these ARE traceable and can be used to support a case in progress. As previously stated here, anyone attempting to do business is on file the same as anyone doing large amounts. So, court-wise, I say rest easy if you're not already on any radar. The bank info gets passed out every time you write a check but still shouldn't be posted online. The miserable crybaby that posted this needs to be castrated with a rusty butter knife. He put a ding in his source (naps). He put a potential major fucking on innocent people likely buying less than he and his fucking dead brother did.

 

[gr8whitetrukker]

Sorry to hear this ....this time Naps is history here . I"ll make sure of it

I think your too late
This guy already killed naps...napster? Hell I can't remember

 

[Ironwill1999]

The fuck do you know about anything? Nothing, nothing at all. Stop acting like you have some secret knowledge none of us have. You don't know a fucking thing.

Ask your boss at pharmacom! !!!!!

 

[Spooby]

@Ironwill1999 dude stfu and stop spamming god damn are you like 14? Get the fuck out of here

 

[fastasf]

Ask your boss at pharmacom! !!!!!

I seriously loathe you.

 

[Ironwill1999]

Yes, I hope people like Frank and Darius take note to wipe their systems frequently. No reason to hold on to info once an order ships. Worst case then, you have a history recorded of 1 order... Not 10 or whatever. Bad, bad, bad.

 

[Wunderpus]

It's so fucking funny to me that your delusional brain really believes comments like that make me a shill/employee.

It's clear to all other members that i'm concerned those larger sources here might NOT clear their data, which is concerning to me. You're just concerned with whether or not i'm an employee, like the idiot you are.

Was it early release at school today?