Credit Card Breaches at TamiyaUSA.com???

[speedy_w_beans]

I hesitated to start this thread as I can't prove the root cause of the issue (hence the question marks in the thread title), but a few other members have mentioned having the same problems I've had.  That's reason enough for me to start a thread and hopefully help a few other USA Tamiyaclub members be more careful when shopping with TamiyaUSA.com.

The TL;DR version is:

- Had a few credit card breaches at Tamiya USA over the years; couldn't pinpoint due to other charges from other vendors on the same cards.

- Tried using the PayPal button, but could never get a transaction to complete this way on their site.

- Reformatted PCs and reviewed security of PCs and the home network carefully.

- Avoided shopping there for some time.

- Used a fresh card at Tamiya USA recently; it was breached quickly.

- Sent a note to TamiyaUSA.com alerting them of my suspicions.

- Casually posted in Effigy3's thread, now seeing replies about similar fraudulent charges.

So something doesn't seem right.  I've supported Tamiya USA over the years with purchases, but I'm leery of shopping with them again.  I hope they do an internal security audit and also ask their distribution warehouse, Mitsubishi Warehouse California, to do the same.  It just seems suspicious that a few of us have had problems, and even on multiple cards.

Again, I can't prove anything, but the data does seem to point in a certain direction...

 

[Hobbimaster]

I cant say any of my cards have been breached when ordering from Tamiya USA, but I can confirm that I tried to place an order just a few weeks ago, tried to use Pay-pal, and it would not let me check out. I was force to use my CC to complete the order. I thought this was quite odd since I never have difficulty using my Pay-pal account. Must keep an eye on my CC account now.

[Rb4276]

There is no doubt in mind that my credit card issues are from tamiyausa because like I said in effigy post the one card I used I never use and it had a zero balance. Then about a week later they tried about 3-5 tranzpsactions until capital one contacted me for suspicious activity.

regarding the PayPal issue, like I said previously it has worked once or twice but one time I had ordered some pinion gears for my dn01 and it was stuck saying pending. I called tamiya USA spoke to a Devin or Dylan who told me sometimes they do not go through but I forget his reasoning. He then told me to feel free to order on the phone. I have since dealt with him two times since. 

[spankrjs]

I purchased a 56305 Mercedes 1838LS from Tamiya USA last week, credit card started having fraudulent charges this week

I used a Discover card, which I just destroyed. Waiting on a new account and card, just before a holiday weekend

 

I was going to make another purchase from them, now I am not too sure what to do 

 

 

[firefoxussr]

The only thing I ever bought was a Lancia 037 re-re body.  But that was like 2013....  Think the card it was on was one I closed a while ago.

Also FWIW... I use PayPal for any online purchase if allowed.  I like the idea of another hoop to jump through before you can get my CC#.

Adam:

 

[crispy]

A timely thread for me.. I have two separate breaches this month - both within 2 weeks of the cards used at TamiyaUSA,, Coincidence? 

[yogi-bear]

maybe the site has been hacked? There is a site where you can check if your details have been stoled and where they came form, although I couldn't find Tamiya in the list of companies listed. Its have I been pawned

worth checking out just in case anyway.

[Hobbimaster]

Well, I got hit too!  After my initial posting about not being able to use pay-pal, and had to check out with my C.Card at Tamiya USA, My bank's fraud dept contacted me yesterday about 22 attempted charges all around 6:00am. Some of these attempted charges were for airline tickets, some kind of $700 fee for an administration company, and a whole bunch of others. So far nothing has posted to my account, but will have to watch my statement for a week and report any unauthorized charges if they appear. And of course wait for a new card to arrive.

 There's no doubt in my mind this card was breached after the Tamiya purchases. It wasn't used for any other purchases.

[Rb4276]

Tamiya needs to be notified about this. I am no longer ordering from them until it is resolved

[backtomyroots]

A few years ago I had my Credit Card data stolen and fraudulent charges placed. I googled my name and CC number and found an "underground" forum listing thousands and thousands of stolen persons data. Had my name, CC number, expiry, 3 digit security code on the back and I was shocked. (Mine could have been stolen from many online purchases).  (This was a European forum).

I also had my Debit card breached, tried to use it for a purchase and it was frozen. Called the bank, they notified me they believed it was cloned @ a gas station and froze it immediately and waited for my call.

Sounds like Tamiya USA has a definite security breach either internally or via some malware/site host.

[Effigy3]

I just placed an order with Tamiya USA.  I bought a pre-paid Visa card and put $35 on it.  The order was $32.15.  I will keep an eye on the account and see if any other charges are put to it.

[Hobbimaster]

Effigy3, That is a sound idea. This past Friday, I tried to buy a few DF-03 option parts (special pricing) using pay-pal with no success from Tamiya USA. I called tech support to order the parts over the phone and also to complain about pay-pal not working and being forced to use a CC. The guy said he'd be glad to help, and they were aware of the payment issues. But when I gave him the part numbers I wanted to order, they were all coming up at MSRP, not the sale price as shown on the web sight. He told me it was a web only special, and I'd have to purchase from the web sight. I guess next time I'll use a prepaid visa.

[StretchMaK]

This is still happening.  Both times in the last two months my credit card info was stolen after using the Tamiya USA site to buy parts. The second time the purchase on the Tamiya USA site was the only purchase on my card.  Cant believe this is not fixed yet.

[speedy_w_beans]

Stretch, I'm sorry to hear this is still happening.  Thanks for the current update.  I did have an email conversation with T-USA about this in 2016 and they assured me they take security seriously.  Personally I was frustrated and vowed to never order from them again, though I have been tempted once or twice to pick up a prepaid Visa card and use that as a "burner" for payment.

I wonder how many other people have had their cards compromised in the last year and a half.  I also wonder how retailers don't get stung by the same issue.  If I was running a retail store I would absolutely go nuts if I started to find accounting discrepancies.

[pastimesteve]

That's incredibly frustrating. I've recently used paypal twice on their site. I hope my information is o.k. since I used paypal? Like speedy, I communicated just recently (last 2 months) with TamiyaUSA about credit card security concerns, and they assured me their site was safe. Good thing I didn't use a credit card. I can no longer believe anything they tell me. Ugh. Really a tough situation for folks like us in the U.S. who are running out of options for ordering spare parts for Tamiya RC.

Steve

[Juggular]

Despite your initial hesitation, I think this is a good thread, Speedy.  

I got lucky that I was able to use PayPal in October.  I am not aware of any problem, but I think I'll go home and comb through.  

[Kingfisher]

On 2/22/2018 at 2:08 PM, pastimesteve said:

That's incredibly frustrating. I've recently used paypal twice on their site. I hope my information is o.k. since I used paypal?

I've been using Paypal there since this thread was started and haven't had any issues.