A free, once-weekly round-up of all the best Nintendo Switch links, articles and videos from the past seven days.
Subscribe

Boomerang Rentals Issues Statement Following Alleged Security Breach

Published January 12, 2015 by |
Boomerang Rentals Logo

Original Article (See bottom of article for updates to this story):

UK-based Boomerang Rentals, a videogame rental service, issued a statement Monday, January 12th, following earlier allegations that customer information had been compromised.

Initial reports alluding to a possible breach surfaced on the Xbox One channel of Reddit on Friday, January 9th, inquiring speculatively as to whether customer card details could have been leaked and or stolen. Reddit user Dannytuppeny highlighted the issue, claiming that he had noticed a series of fraudulent transactions on his debit card.

Several other customers came forward stating they too were seeing fraudulent activity taking place on their debit and credit cards.

Boomerang Rentals were quick to respond to the growing allegations, posting in the same Reddit thread. The company stated that “it is very unlikely someone could retrieve your card details”. Boomerang Rentals did not outright refuse any liability, but the company did also suggest that the leak may due to a ongoing “O2/Vodaphone fraud problem”.

Following growing user concern over the weekend, Boomerang Rentals took their website offline early Monday morning, citing “maintenance work” as the reason for the closure.

Boomerang Rentals offline

 

A statement from the company was also made available shortly after, reading as follows:

Following an initial enquiry at the end of last week, we have had a number of
customers raise concerns regarding fraudulent payment attempts on their card
details that are also registered with us.

We are fully investigating this issue and have temporarily removed access to
our website while this continues.

We have contacted our Payment Provider Sagepay and our Merchant Bank
World Pay and neither have any reported concerns relating to us.

However, please be assured we are treating this with the utmost urgency and
can provide more information on our findings as they become available.

If you have any concerns, please contact your card issuer.

We apologise for any inconvenience the removal of our site has caused and
thank you for your patience as we continue to investigate further.

Boomerang Rentals rose to prominence in 2013, when then-leading competitor LoveFilm announced they would no longer be offering game rentals.

Are you a Boomerang Rentals customer? Let us know in the comments if you’ve experienced any issues with your account.

UPDATE 1:

As of midday on Tuesday, January 13th the Boomerang Rentals site is still offline. An updated statement from the company detailed that investigations are continuing and that the security of the customer experience with Boomerang is “extremely important”.

Boomerang added that their service “will be limited for a time” whilst the company “conduct continued investigations and work towards resuming a normal service as soon as possible”.

Despite the website being offline many customers are receiving ‘frustrating’ service emails from the company, such as those prompting customers to fill an empty rental queue — something they can’t do whilst the site is down.

UPDATE 2:

Boomerang Rentals issued the following press release on the afternoon of Tuesday, January 13th:

Situation Update: Boomerang Rentals – 13th January 2015

What happened

On Friday we were contacted by a customer who was concerned that a fraudulent charge had been attempted on his credit card, and he was worried that our system had been compromised. He quoted another person who had made a comment on Twitter of a similar issue.

What we did

We began an investigation as soon as additional concerns were raised. Credit card data is stored in a strongly encrypted format and not viewable to any internal staff, however, at that stage, we felt we should take the concerns seriously.

Over the weekend, we noticed other people online reporting similar issues and we became increasingly concerned. So, based on the information available at the time and conscious of the concern, we made the decision on Sunday afternoon to take the site off line while we continued our investigations.

Where we are

By Monday morning, we had been contacted directly by a small number of additional customers. We contacted the fraud department of our merchant bank, but they knew of no issue. We also contacted our payment gateway provider and they also had no concerns. They are assisting us in a consultative capacity.

By this time we could see lots of people talking about this online, but only a few people had contacted us directly.

To date we have not found any evidence of a breach of our systems. We are continuing to investigate and continue to take this issue very seriously.

We have also made the decision to very quickly move over to a token method of payment which obviates the need to have encrypted data on our servers, to give our customers further reassurance.

We would not ever wish to be the source of customer card information being compromised, so are making this change urgently. This work will take about a week, and we have removed the card details in their encrypted form, from our on- line system, and are removing the facility to update or provide card details until the work is complete.

Subscriptions will be processed daily each weekday morning under further supervised controls. Once the new system is in place, we will be able to collect payments through the token system.

We will also investigate the possibility of introducing PayPal as a form of payment as well, to offer our customers further choice.

What next

First we will start to process incoming and outgoing rentals. Then, once we are satisfied that our investigations are complete, we will bring our website back on line so existing customers can see their rental lists. We apologise for the inconvenience caused to our customers while this work is undertaken. Once everything is running again, we will be back in touch and will include updates at that time.

Finally, we would like to re-emphasise that we have not found any evidence of a breach in our systems (our systems were regularly tested for vulnerabilities by a 3rd party specialising in this) but our Engineers and Technical Advisors continue to investigate.

We are aware of the interest and concern this situation has raised and care about our customers and our reputation greatly and are urging our customers to get in touch with us immediately if they have any concerns.

We will shortly be sending an email directly to each of our customers.


  • Nicola Badham

    £30 has gone out my account to 02 and my bank stopped £20 going to vodaphone and notified me and stopped my card x

  • pipedreambomb

    The more times I read this press release, the more it seems like bullshit. They’re refusing to acknowledge it’s a real issue, and still haven’t emailed their customers to warn that there even MIGHT be a problem, and that we should check our bank accounts.

    See the Reddit thread or their Facebook comments to see many, many cases of customers being the victims of fraud in the past week or two.

    My case is not unusual, and I think it’s a very clear example that the odds are high that there has been a breach. I’ll put in simple steps:

    1) I notice the Boomerang site has been down for a few days, and they’re not sending me games.
    2) I find their Twitter page and find out they’ve been putting out security statements, primarily on the Facebook page.
    3) I go and look at the latest Facebook post by Boomerang and see the large number of people (hundreds of comments) regarding money stolen from their bank accounts via things like payments for phone topups.
    4) At this point, I go and check my bank account, and find that last week, £50 of top-ups have been charged for a phone network that I don’t use

    Is it a big coincidence that I found the exact thing I was checking to see had happened?

    It was quite easy to get the money back via my bank’s fraud department. Luckily, I did not become overdrawn and have to pay fees, or have my genuine transactions blocked due to lack of funds. I even have enough cash on me to last until my replacement debit card arrives. Many others won’t be as fortunate.

    It is totally unacceptable that I had to find out through this weird grapevine. Boomerang has still not informed its users that they should be looking out for this fraud, and for all we know, the thieves are still looting the bank accounts of unsuspecting Boomerang customers.

  • Katy Stevens

    This has happened to me today, thanks to boomerang. Card cloned and used in a hotel in the US and for Vodafone top-ups, Boomerang are definitely the source.

    • I had my card cloned last week which was also used in a hotel and for Vodafone top-ups. I’ve only just randomly stumbled on to the fact that Boomerang had been hacked today. If i had known back in january i could have kept a closer eye on transactions coming out of my bank account.

  • Smith Stephanie

    Hello i am Mrs Smith Stephanie and i am from Ohio in United State, i am here to spread the good news to the world on how Mr James Freeman help me in getting a blank ATM card i was fired i work as a Secretary in the office for 3years and everything was going on smoothly and working fine until one day something happened in the office and lead to my firing i suffered for long and applied for other jobs but no way one day i was browsing through the internet i saw people testifying on how they have got blank atm card that has changed their life so i had to give it a try because i was really down of cash so i contacted him and told him my problems he felt for me and told me to send down my details that he don’t charge to get one so i did and really he sent me a blank ATM card that has really change my life in a day i was able to withdrew 4000USD with it so friends i have come here to spread the good news here is his email if you need help don’t hesitate to contact him:
    {germanwingsatmhackers@gmail.com} he is ready to answer and help you he is a nice man.

  • john

    Ive just seen this, and wow so behold £30 was payed to 02 also of my card. My bank said it was a top up.

  • Keshu Modhwadia

    all rubbish,
    Im with boomerang rentals,
    on 14th jan, 3 seperate transaction taken out my account amounting £349.50

    coincidence NO!

    sent them letter, even threatening legal action, not 1 response.

    my account was on hold prior to this event.
    now somehow they are trying to charge my card 3 times now, ?? hu.
    latest attempt being fri 10th april.

    NEVER USE THEM. TRUST ME
    others got off lightly, with little top ups.

  • Stella Gwen

    Attention! Attention!! Attention!!!

    I want
    to inform everyone that H. A. C. is at it again in changing people’s
    life. I have been searching for job everywhere but all to no avail and
    everything became worse by the day living from hand to mouth. I couldn’t
    even afford to pay my bills, which lead to my Landlord sending me away
    from his home. I went to stay with a friend of mine. One faithful
    morning i was browsing through the internet with my phone seeking for
    online jobs where i came across a comment of Hackers advertising a Blank
    ATM card which can be used to hack any ATM Machine all over the world, i
    never thought this could be real because most advert on the internet
    are based on fraud, so i decided to give this a try and look where it
    will lead me to if it can change my life for good. i contacted this
    hackers and they told me they are from India and also have branches all
    over the world in which they use in developing there ATM CARDS, and also
    experts at ATM repairs, programming and execution which i was taught
    various tips and tricks about breaking into an ATM Machine with a Blank
    ATM card.i applied for the Blank ATM card and it was delivered to me
    within 3 days and i did as i was told to and today my life have change
    from a street walker to my house, there is no ATM MACHINES this BLANK
    ATM CARD CANNOT penetrate into it because it have been programmed with
    various tools and software before it will be send to you. my life have
    really change and i want to share this to the world, i know this is
    illegal but also a smart way of living Big without the help of the
    government. if you also want this BLANK ATM CARD i want you to contact
    the Hackers email on mrbrownhacker@hotmail.com
    and you life
    will never remain the same email mrbrownhacker@hotmail.com you can also contact him on his mobile +2347038566755

  • Mr Eldred Sephus

    Hello Friends, i want to say a very big thank you to Marce, i am Mr
    Leroy Fred from US i want to share a testimony of how my life was change
    by an ATM BLANK CARD, i was a very poor man even to eat was a very big
    problem for me and my family i seek for jobs in different place but
    could not get one my rent and bills was too much for me to pay so i had
    to go to a one bed room flat because of the high rate of poverty i
    became frustrated until one certain day when i was checking through the
    internet i saw many different testimony of different people but to one
    man on how he gave them a blank atm card that changed their life,
    because of the high rate of poverty that was affecting me i had to
    apply on it too they told me everything needed for me to do and they
    sent the atm blank card to me which delivered to me within 3weeks that
    changed my life all i want to say is thank you to Marce for helping me
    so if you are suffering and need a change of life i will advice you to
    contact them now at their email: marceatmhackers@gmail.com and your
    life will not remain the same..

  • Bravo Ogbe

    Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode. email (alexander_smith56@yahoo.com) or call +2348112252529 for how to get it and its cost,and how to also hack credit cards and send the money to your self..

    ***NOTE: DON’T EVER MAKE THE MISTAKE OF CLICKING THE “ALL” OPTION. BECAUSE IT WILL TAKE OUT ALL THE AMOUNT OF THE SELECTED VAULT. To get the card email (alexander_smith56@yahoo.com) or call +2348112252529.

    Send these few details to the email..
    Name:
    Age:
    Occupation:
    Gender:
    Country:
    State:
    Phone number:
    Are you on whatsapp?

    await your reply soon…

  • Mr Eldred Sephus

    I am Mr. prince Harold , i want to use this medium to thank Marce who
    helped me with an already hacked ATM CARD and i was so poor without funds
    that i got frustrated. One morning as i was browsing on the internet, i saw
    different comments of people testifying of how Marce helped him from being
    poor to a rich man through this already hacked ATM CARD. I was skeptical if
    this was true, i decided to contact one of the people giving this testimony
    to see proof before i contact this hackers, and they proved to me beyond
    all doubts that its was really for real so i urgently contacted the email {
    marceatmhackers@gmail.com}, and today am also testifying on how Marce
    helped me. I never believed in it until the card was sent to me, which am
    using today Contact the company now and become rich. Email:
    marceatmhackers@gmail.com

  • micheal zander

    HOW TO MAKE EASY MONEY

    I want to inform everyone that H. A. C. is at it again in changing people’s life. I have been searching for job everywhere but all to no avail and everything became worse by the day living from hand to mouth. I couldn’t even afford to pay my bills, which lead to my Landlord sending me away from his home. I went to stay with a friend of mine. One faithful morning i was browsing through the internet with my phone seeking for online jobs where i came across a comment of Hackers advertising a Blank ATM card which can be used to hack any ATM Machine all over the world, i never thought this could be real because most advert on the internet are based on fraud, so i decided to give this a try and look where it will lead me to if it can change my life for good. i contacted this hackers and they told me they are from India and also have branches all over the world in which they use in developing there ATM CARDS, and also experts at ATM repairs, programming and execution which i was taught various tips and tricks about breaking into an ATM Machine with a Blank ATM card.i applied for the Blank ATM card and it was delivered to me within 3 days and i did as i was told to and today my life have change from a street walker to my house, there is no ATM MACHINES this BLANK ATM CARD CANNOT penetrate into it because it have been programmed with various tools and software before it will be send to you. my life have really change and i want to share this to the world, i know this is illegal but also a smart way of living Big without the help of the government. if you also want this BLANK ATM CARD i want you to contact the Hackers email on mrbrownhacker@hotmail.com
    and you life will never remain the same email mrbrownhacker@hotmail.com

  • Fred Wilson

    Hi, My name is fred wilson and i just want to share my experience with everyone.
    I have being hearing about this blank ATM card for a while and i never really
    paid any interest to it because of my doubts. Until one day i discovered a financial
    group called micro finance group while i was searching for job online.
    They are really good at what they re doing.

    Back to the point, I inquired about The Blank ATM Card. If it works or even Exist.
    They told me Yes and that its a card programmed for random money withdraws without
    being noticed also has a technique that makes it impossible for the CCTVs to detect
    you can also be used for free online purchases of any kind. This was shocking
    and i still had my doubts. Then i gave it a try and asked for the card and agreed to their terms and conditions. Hoping and praying it was not a scam.
    three days later i received my card and tried with the closest ATM machine close to me
    It worked like magic. I was able to withdraw up to $3000. This was unbelievable and the happiest day of my life. So far i have being able to withdraw up to $35000 without any stress of being caught. I don’t know why i am posting this here, i just felt this might help those of us in need of financial stability. BLANK ATM CARD FIRM has really change my life. If you want to contact them, Here is the email address atmwirenetwork@gmail.com.
    And I believe they will also Change your Life too. Contact their general manager directly with the above email address.

  • Harry dickson

    i am Mr harry dickson and i want to tell the world on how i got the blank ATM card. I was so wrecked that my company fired me simply because i did not obliged to their terms, so they hacked into my system and phone and makes it so difficult to get any other job, i did all i could but things kept getting worse by the day that i couldn’t afford my 3 kids fees and pay light bills. I owe so many people trying to borrow money to survive because my old company couldn’t allow me get another job and they did all they could to destroy my life just for declining to amongst their evil deeds. haven’t given up i kept searching for job online when i came across the testimony of a lady called Vanessa regarding how she got the blank ATM card. Due to my present state, i had to get in touch with Hacking organization and i was told the procedures and along with their terms which i agreed to abide and i was told that the Blank card will be deliver to me without any further delay and i hold on to their words and to my greatest surprise, i received an ATM card worth $4.5million Usd. All Thanks to this hackers. you may contact them via email..{dicksonharryblankatmharckers@gmail.com}

  • Efcc Office

    HACK ATM AND BECOME RICH TODAY
    You can hack and break into a bank’s security ATM Machine without carrying
    guns or any weapon. How is this possible? First of all we have to learn
    about the manual hacking of ATM MACHINES and BANKING ACCOUNTS HOW THE ATM
    MACHINE WORKS. If you have been to the bank you find out that the money in
    the ATM MACHINE is being filled right inside the house where the machine is
    built with enough security .to hack this machine We have develop the special
    blank ATM Card which you can use in any ATM Machine around the world. this
    card is been programmed and can withdraw 8,000 USD within 24 hours in any
    currency your country make use of there is no ATM MACHINES this BLANK ATM
    CARD CANNOT penetrate into it because it have been programmed with various
    tools and software before it will be send to you. The card will make the
    security camera malfunction at that particular time until you are done with
    the transaction you can never be trace. it also has a technique that makes
    it impossible for the CCTVs to detect you, there are so many other hacker
    out there whom claim to be real you have to be very careful they can never
    create this card all they want is your money. no ATM card can be able to
    withdraw $50,000 usd each day that is impossible, getting the card you will
    forward the company your address details so we can proceed to send the card
    to you once you agree to the terms and conditions. you can contact us on
    email now at americapressblankatmcard@gmail.com
    BEST WAY TO HAVE GOOD AMOUNT TO START A GOOD BUSINESS or TO START LIVING A
    GOOD LIFE

  • Adam Atm Idemolia

    Hi, My name Esteve and i just want to share my experience with everyone.
    I have being hearing about this blank ATM card for a while and i never
    really paid any interest to it because of my doubts. Until one day i
    discovered a hacking guy called Wayne. he is really good at what he is
    doing. Back to the point, I inquired about The Blank ATM Card. If it
    works or even Exist. They told me Yes and that its a card programmed for
    random money withdraws without being noticed and can also
    be used for free online purchases of any kind. This was shocking and i
    still had my doubts. Then i gave it a try and asked for the card and
    agreed to their terms and conditions. Hoping and praying it was not a
    scam. One week later i received my card and tried with the closest ATM
    machine close to me, It worked like magic. I was able to withdraw up to
    $3000. This was unbelievable and the happiest day of my life. So far i
    have being able to withdraw up to $28000 without any stress of being
    caught. I don’t know why i am posting this here, i just felt this might
    help those of us in need of financial stability. blank Atm has really
    change my life. If you want to contact call 08142630659 09059882152,
    Here is the email address atmblank12@gmail.com, And I believe they will
    also Change your Life