Can we SUE DISH NETWORK for the POOREST SECURITY on website

[Rags]

Guys,

Last week, I got the call ... ( Pay for 6 months and you will get 12 months DISH free ) ...

My account has been hacked.
They want me to send $500 to XYZ via Western Union....

I have been researching on this topic
GUESS WHAT........
I FOUND OUT this....

YOU ALL SHOULD TRY THIS :
How can a guy know your User Id and Password to log in into your dish account...???
Welll very simple...
DISH WEBSITE is all screwed up.
When you click on forgot USER ID.... it will ask you many things...
But just enter your HOME PHONE and 16 digit A/C and your email ID on next screen.... and YOUR USER ID is filled into your SCREEN...

Now click forgot password...
Enter account number, phone number and email ID .... and YOU WILL BE ASKED to enter a NEW PASSWORD..

So whtever you do.... anybody can hack your account... with small information.... they dont even need last 4 of SSN...
TRY FOR YOURSELF..

WHAT I HAVE DONE :

Talked to Dish FRAUD line and he disabled my Online Acess....
HEY BUT GUESS WHAT...
I could register as a new user with all the INfo and COULD GO INTO MY ACCOUNT Again...
THIS IS UTTER NONSENSE from a company like DISH NETWORK.
I am getting a Lawyer advice on this.... as I write here


Someone from DISH.... are you reading ??

 

[mike123abc]

You can change your email address, many services like yahoo and gmail offer free ones. This will lock them out of your account.

You would probably be better off pursuing it with your state's Attorney General's office, especially if you live in a state like CA with stricter online privacy requirements.

 

[Skee7ix]

And how someone is supposed to know your 16 digit Account Number?

 

[dare2be]

Are you an international programming customer? So far these scams/hacks seem to be targeted toward them.

 

[dare2be]

You can change your email address, many services like yahoo and gmail offer free ones. This will lock them out of your account.

Not if the scammer after already hacking into the account wrote the receiver# down. You can also access the site with receiver# instead of email address. All you need is 3 pieces of information.

 

[mike123abc]

And how someone is supposed to know your 16 digit Account Number?

It seems that according to other posts that a third party marketing service may have leaked the info.

 

[Smwoodward]

Not if the scammer after already hacking into the account wrote the receiver# down. You can also access the site with receiver# instead of email address. All you need is 3 pieces of information.

Really all you need is 2 pieces of information.

click forgot user name, enter phone number, now all you need is one other piece. Put it in, got the user name. Now click forgot password, enter the same phone number, now you can change password. The phone number should not be used at all for account recovery. way to common for people to know or have the phone number.

 

[sparc]

to the OP, i would email consumerist.com at tips@consumerist.com with all your privacy breach info. The fastest way to get DISH to acknowledge these problems that have been going on for years is to get it out into the public.

You may also want to make an FTC complaint as well: https://www.ftccomplaintassistant.gov/FTC_Wizard.aspx?Lang=en

 

[Scherrman]

Could be an old Dish retailer that got pissed off. They would have all of their customer's account numbers and equipment info.

 

[dare2be]

Really all you need is 2 pieces of information.

click forgot user name, enter phone number, now all you need is one other piece. Put it in, got the user name. Now click forgot password, enter the same phone number, now you can change password. The phone number should not be used at all for account recovery. way to common for people to know or have the phone number.

True, but you still need at least 1 of receiver, account, SSN last 4, or city of birth, since if I only enter phone number on the first page, then on the 2nd page email is greyed out, so at least I can't get in just with email and phone number.

I wonder if the scammers are stealing paper statements out of people's mailboxes to get the account numbers.

 

[dare2be]

Could be an old Dish retailer that got pissed off. They would have all of their customer's account numbers and equipment info.

Who could that be?

 

[Scherrman]

I can think of one ex-retailer on here that seems to be upset with Dish. I don't think it's him though.

 

[dare2be]

I was referring to the same one, and was joking.

 

[Rags]

Yes, I am an international programmer.

Inspite of telling DISH about their website issue.... 5 days ago.
Even as of today it is not fixed and ...
If someone knows your 16 digit a/c, phone number..... they can hack into your a/c, even if DISH disables your account... or even if you change your email address...
TRY for yourelf...

How come no one from DISH is reading this ?

 

[Scherrman]

I knew you were joking and had a feeling someone would think of him right away.

 

[mike123abc]

I can think of one ex-retailer on here that seems to be upset with Dish. I don't think it's him though.

It could be any retailer whose computer was hacked/got a virus/etc. Just need someone to recognize the data that was stolen and sell it.

 

[Rags]

True, but you still need at least 1 of receiver, account, SSN last 4, or city of birth, since if I only enter phone number on the first page, then on the 2nd page email is greyed out, so at least I can't get in just with email and phone number.

I wonder if the scammers are stealing paper statements out of people's mailboxes to get the account numbers.

No, even on second page, if you just enter phone number... you will get into the account.

 

[dare2be]

No, even on second page, if you just enter phone number... you will get into the account.

The 2nd page doesn't ask for phone number if you entered phone number on the first page. You must be thinking of the 3rd page (resetting password).

 

[Rags]

The 2nd page doesn't ask for phone number if you entered phone number on the first page. You must be thinking of the 3rd page (resetting password).

Sorry, I meant email address, which is known to the hackers...

Forget about that...
IF DISH has disabled my Online aceess for security....
You go in and create a new Online ID and can gt into the account again.... THATS THE HEIGHT !!

 

[dare2be]

Sorry, I meant email address, which is known to the hackers...

Forget about that...
IF DISH has disabled my Online aceess for security....
You go in and create a new Online ID and can gt into the account again.... THATS THE HEIGHT !!

But again, email address is greyed out on the 2nd page if you use phone number on the first page.

I don't disagree that this is shoddy security, just relaying accurate information.