Hello everyone,
I have an update from the team to share with you. This is the only information that the Forum team have, so any questions or concerns should be directed to Membership Services, but if you need a hand, or if you’re struggling to speak to someone, please tag me and I’ll do my best to help
Now, here’s the update from the team:
"Thanks for all of your comments on this thread. We can confirm that the incident has now been resolved.
Here is a quick overview of what happened and what action Trustedhousesitters have taken.
What Happened?
We identified a phishing attempt targeting TrustedHousesitters members using our platform messaging functionality.
The messages either claimed to be from a TrustedHousesitters member or a TrustedHousesitters employee.
The message was attempting to make the recipient click on a link and enter their payment card details.
What has TrustedHousesitters done about this?
Upon being made aware of this incident, we immediately deleted all of the phishing messages.
We identified the source member accounts of the phishing messages and blocked any future attempts to send unauthorised messages.
We’ve temporarily removed the ability to share website links within the messaging functionality. We will be reintroducing this once we have completed a review of this functionality.
Our investigation, which is ongoing, initially indicates the incident was caused by 3 member accounts being compromised/hijacked due to the use of shared or weak passwords. Email addresses and passwords garnered in other (not TrustedHousesitters) website breaches are easily available on the dark web, hence the importance of never reusing passwords across different Apps and websites.
Is my account compromised?
If you received the phishing message but did not provide any information or click on links, your account is likely safe. However, we recommend changing your password immediately as a precaution.
If you provided any personal or financial information, please take the following steps immediately:
- Contact your bank or card issuer to report the incident immediately.
- Monitor your accounts for any unauthorised transactions.
- Change your TrustedHousesitters account password.
What should I do if I receive a phishing message?
- Do not respond, click on any links, or provide any information.
- Report the message to us by forwarding it to security@trustedhousesitters.com"
Thank you to everyone who took the time to come and report what was happening here on the Forum. If there are any further updates I’ll share them in this discussion post.
Jenny