Possible compromised GateHub account

[rst]

My account was hacked at GateHub all the XRP was transferred out.  Gatehub did an investigation and can see where it went.  Also they see it happened several times from the same thief.  Gatehub said it is irreversible and did not give me my money back.  Gatehub said that I should go after the thief.  Conclusion money not safe at GateHub.  I have contacted the FBI.  If your money was stolen too, then you should contact the FBI.

Edited December 4, 2016 by tomxcs
Post title changed to something less inflammatory - Please do not make accusations without evidence

[Morty]

How did they hack your account?

Did they guess your password or was gatehub compromised?

[cmbartley]

mmm, did you have two-factor authentication set up? Was your money in the hosted wallet or a Ripple wallet? If a Ripple wallet please post the public address. It's hard to prove that your xrp are not safe there unless you can prove that you did everything possible to keep your xrp secure. 

Edited December 4, 2016 by cmbartley

[Roborovskii]

rst, more details given here (e.g. public address, time, etc.) would be logical. Else this post would just seem like a random flame at gatehub.

A response from gatehub would also help.

[Duke67]

@rst, without further details (see below) it's difficult to take sides. Your post is not of much use to other Ripple fans...

6 hours ago, cmbartley said:

mmm, did you have two-factor authentication set up? Was your money in the hosted wallet or a Ripple wallet? If a Ripple wallet please post the public address. It's hard to prove that your xrp are not safe there unless you can prove that you did everything possible to keep your xrp secure. 

 

[T8493]

9 hours ago, rst said:

My account was hacked at GateHub all the XRP was transferred out.  Gatehub did an investigation and can see where it went.  Also they see it happened several times from the same thief.  Gatehub said it is irreversible and did not give me my money back.  Gatehub said that I should go after the thief.  Conclusion money not safe at GateHub.  I have contacted the FBI.  If your money was stolen too, then you should contact the FBI.

 

 

 

 

Ask GateHub to provide you with IP addresses (public and private) and all other personal details (browser agent string, for example) which were used to access your account. Take a look at provisions regarding the "right of access to personal data" in the UK Data Protection Act.

This info can be very helpful when you have to prove that you didn't access or send your XRPs.

GateHub should block accesses from IPs that don't belong to you.

 

Edited December 4, 2016 by T8493

[thinlyspread]

5 hours ago, T8493 said:

Take a look at provisions regarding the "right of access to personal data" in the UK Data Protection Act.

Sounds like he's US based, but worth looking at this anyway, it's fairly exemplary.

[T8493]

13 minutes ago, rippledigital said:

Sounds like he's US based, but worth looking at this anyway, it's fairly exemplary.

GateHub is based in the UK and is governed by UK laws. The definitions of "data subject" and "personal data" in the UK Data Protection Act are the same for the UK and for the non-UK citizens (the Act doesn't distinguish between UK and non-UK citizens).

 

 

 

 

 

Edited December 4, 2016 by T8493

[Guest Haydentiff]

15 hours ago, rst said:

Also they see it happened several times from the same thief.

I cannot imagine Gatehub replying with "The bandit strikes AGAIN!"

@gatehub ? @gregor? @enej?

[cmbartley]

Smells like FUD.

[kanaas]

8 minutes ago, cmbartley said:

Smells like FUD.

YEP

[GateHub]

Hi @rst,

we are sorry for your loss.

While we can't discuss any details of this incident publicly we want to be clear that GateHub has NOT been compromised.

All information will be available to law enforcement. Access log has been sent to the victim.

P.s.: Please use strong unique passwords and enable 2-Step verification to keep your account secure.

 

 

Edited December 4, 2016 by gatehub
typo

[thinlyspread]

2 hours ago, T8493 said:

GateHub is based in the UK and is governed by UK laws. The definitions of "data subject" and "personal data" in the UK Data Protection Act are the same for the UK and for the non-UK citizens (the Act doesn't distinguish between UK and non-UK citizens).

Ah yes, of course.

[Guest Haydentiff]

1 hour ago, gatehub said:

P.s.: Please use strong unique passwords and enable 2-Step verification to keep your account secure.

Are Gatehub accounts with weak passwords being targeted?

[T8493]

2 hours ago, Haydentiff said:

Are Gatehub accounts with weak passwords being targeted?

GateHub is blocking access from IPs that don't belong to the user (or at least they announced they would block such access). So this shouldn't be a big issue.

EDIT: Don't get me wrong. Weak passwords are bad. But if someone can access GateHub website using your IP address, then you have a much more severe issue.

Edited December 4, 2016 by T8493