Wanted to give a heads up, ordered some stuff from TNVC about a month ago and got a notification from my CC provider that someone attempted to use my card to make purchases at Walmart and a few other places. The card was one time use and only used at TNVC. If you've placed an order in the past few months it might be worth keeping an eye out.

Thanks for the heads up. I’ve heard a lot of this happening on Reddit as well. I ordered there 2ish weeks ago. I have fraud protection but I’ll be mad if I have to reorder a card again. It seems to happen atleast once a year some how or another.

Hello,

Very sorry to hear that this has happened to you, credit card theft and fraud is unfortunately far too common these days and extremely frustrating.

Please contact our customer service team at sales  tnvc.com with the details of your transaction if you have not already.

We take website and customer data security extremely seriously and investigate every report that we receive to ensure that our customers are protected to the greatest extent possible, and employ a 24/7 on-call IT team to respond to potential security threats and breaches.

TNVC utilizes a third-party payment processor for online payments through the website, and no TNVC employee sees, handles, or stores any customer credit card information for orders placed through the website. We also conduct periodic third-party website security evaluations.

Unfortunately fraudsters have become extremely sophisticated, and may access information through a variety of means and points of entry, however we experience an extremely low rate of fraud attempts and reports for the amount of volume our website handles. I realize this is cold comfort if you are in the minority who does experience a breach attempt, however we encourage anyone who experiences a fraud attempt to contact our customer service team so that it can be investigated to ensure the continued security of customer data.

~Augee

The same thing happened to me yesterday, I got a verification call from Dell that someone was using my card to buy a PC. I also purchased from TNVC with this card about two months ago.

Was it a chase Visa card? I had my card number stolen a few days ago as well, I dont believe it was a tnvc problem as I haven't used that card to buy anything from them.

It was from TNVC. It's happened to a lot of guys recently. Would be nice to know they're looking into it instead of getting a canned, lawyered response. This seems to be a recurring issue.

There are ways to get your card info stolen other than from the only vendor you ever gave your card info to.

I had a debit card sent to me unsolicited (my bank wanted me to use it in place of my soon to expire ATM card, but I absolutely refuse to use debit cards).
I threw it in the filing cabinet and made a mental note to make the jerks reissue my debit card.

6-8 months later, I got a text alert from my bank, asking me if I made a tiny purchase from Amazon.MX (Mexican Amazon). I replied NO, they reversed the charge and canceled the card which I had never used or even activated, but which had been used in Mexico to purchase something.

I'll take it as a compliment that you felt my response was a "canned, lawyered response," given that I wrote it on my phone while sitting behind the booth at GunStock this weekend...

For obvious reasons, I am not going to give a detailed run-through of all of our security protocols and procedures on the open internet, but again, website security is a continuing and ongoing process for us.

Obviously every incident is different, and I am not going to make any comments regarding any individual situations, however, the reality is that breaches of personal data much more frequently occur on the customer side than the merchant side, however we do not ever make the presumption that the cause of data breach is on the customer side before individual investigation of the incident, as we do not want even the possibility of data breaches through our website.

We have commissioned site-wide forensic IT investigations (the most recent one being this past July), "red-teaming" our IT protocols, and again, we utilize Authorize.Net as our website payment processor:

"Authorize.Net has the most customers of any payment processor[20] and has been described as one of the more senior players in the payment processing industry, retaining a "decent portion" of the industry's market share.[18]"

https://en.wikipedia.org/wiki/Authorize.Net

Again, we take issues such as these extremely seriously having been in the direct-to-consumer eCommerce business for nearly 20 years.

For better or for worse, TNVC also has many customers--we have been aware of accusations being made in various places of everything from a disgruntled TNVC employee individually stealing credit card numbers to malware payment processor issues, etc., there is also the very real psychological phenomenon of suggestibility and correlation, where one person claims that their data was stolen or they received fraudulent charges after shopping at TNVC. Someone else reads this and thinks "hey, I just had some fraud on my card, and I've shopped at TNVC..." and they come to conclusion, fairly or not, that their experience too is related. This can snowball very quickly in as small and relatively contained a market as the night vision industry, especially with TNVC's footprint in the industry, whether you love us or hate us or something in between.

~Augee

I have heard a lot of these stories about folks having issues with their cards being compromised shortly after shopping at TNVC. That said, it would not stop me from shopping there with a card. Use a service like Pay in your browser to create a single use virtual card. This will ensure you do not have fraud. This is a best practice you all should use shopping anywhere online.

FWIW, this is undoubtedly an issue with the processor and not an internal TNVC issue.

Hit the nail on the head and to the other user, I also won't use attorney BS lingo, etc. People who know me know I NEVER  pulsate that BS...

A few years back when I first got wind of a customer who politely and honorably wrote us asking us to look into a possible compromise of his CC I took personal action as I always have and will give our customers no matter if they send 5 dollars or 5 thousand the upmost care and consideration; I launched an extensive examination with the best forensic inspection (top to bottom) with our ENTIRE site. Obviously as been stated we do not, nor ever keep any CC information on file, never have never will. I had the brightest IT minds including our banks top teir fraud prevention scrub our entire back end, looking and examining every inch of our entire sight. They found nothing, but instead of taking their word for it, I went a step further and implemented another security protocol that cost of thousands to insure each and every transaction was secure.

With that said I will again instruct my forensic IT folks to rev up another round of detailed inspection.  I will be happy to do that but I am gonna ask Augee or Will to get with the OP and get FULL details..

Btw, I personally have been a recent victim of one of my CC cards. I don't blame anyone excpet the crooks are very good at what they do and my fraud could have come from anywhere...

In closing, as Augee mentioned and I spoke of, our #1 priority is our customers period and nothing else.

Vic

Edit, spelling from my phone.

Thanks for the responses Vic and Augee. My goal isn't to stir the pot more, but working in cybersecurity for a living it's something I see constantly with my customers.

One common threat vector lately is through APIs.. particularly with web/mobile applications.. you could be buttoned up airtight internally, but once that data leaves and en route to the payment processor, it's snagged. As I told Augee, I would highly suggest looking into an API security solution if you're leveraging APIs with your store. It could also be a problem with the processor itself.

What you often see is a 1-2 month period of scraping this data through different means, and then a short burst of fraudulent charges across multiple cards to prevent the "prairie dog effect" of someone raising a red flag.

I don't think this is coming from TNVC directly. Two weeks my credit card info was stolen, and yesterday I received a notification that my data was compromised via Eye4Fraud, which is an online payment protection service.

I would suggest you stick to CC fraud in this thread, which would seem to be an important enough issue of itself.  

CC Fraud isn't always easy to track to a fault and most companies these days use full 3rd party plugins who handle data transfer and storage. So take it with a grain of salt when someone talks CC fraud.

I will take this discussion to email to cover a few important things.

I placed 2 orders with TNVC over the last month or so.

I also got hit with fraud charges. I have never had this happen in the past.

Just fyi

Had that happen to me last year. My CC notified me that someone was trying to use my card number to pay for Vail Resorts. Luckily I used a merchant specific virtual number to pay for the order so it couldn't be used elsewhere. It was created specifically for TNVC and only used that once, so it definitely got stolen somewhere through their payment process.

Hopefully they have better luck finding the leak this time. Good luck.