FYI – Julep Security Breach Details

For everyone upset about not being notified about the hack for over a month, by comparison, there was a Yahoo hack of ONE BILLION accounts in 2013 and they just notified people yesterday.

Sometimes these things take time to catch.

I received an email last month stating I needed to update my billing info, which I thought was strange since I use PayPal and all my info hadn’t changed, so I ignored it. But then I never got billed…I didn’t really need the box so I said oh well I’ll look into it next time. Seeing this though makes me question it again!

I was a member already, no charges or hack for me 🙁 that ducks for everyone who had their account hacked

Ok…so am I the only one who did not receive notification about this? Dang…unsubscribed.

My credit card company alerted me right away and reversed the fraudulent charges. It’s a pain, but it’s a fact of life in our 21st century world. I don’t hold it against Julep.

Honestly if I stopped shopping at every store where my card has been hacked, I’d have nowhere left to shop at all. I mean….I’d have to give up Target. THAT’S NO WAY TO LIVE, MAN. 😉

I don’t think most people are upset that the hack HAPPENED, but rather in how Julep failed to address it for over a month after its occurrence. For example, a couple years ago, Target’s system was hacked on Black Friday. I received a notice two days later. They didn’t hesitate to let us know what had happened. Julep waited far too long to say something.

I think it’s impressive that they determined the exact dates & customers that were affected. I realize that it’s a huge inconvenience for anyone who was affected, but I, for one, am really grateful that they did such due diligence to determine that it wasn’t every single account that was hacked.

They are offering free monitoring services, but they also recommended that we freeze our credit account, the cost of which varies by state, and they are not covering those fees.

I agree with what people are saying about how Julep isn’t to blame for being hacked, but I think they could have handled the situation better and notified affected customers much more quickly.

Whelp, that explains how my card number was stolen and $780 worth of makeup charges from colourpop were made.

Thanks to MSA for letting us know.. Even if we had no activity on the exact dates, I wish companies would give you a heads up so you can be more vigilant.

I recently subscribed, but luckily, on November 20th, so it sounds like they had established more secure practices by then. People should not be quick to blame Julep for the hack because this stuff happens all the time. There are some hackers that are extremely good at hacking even some of the most secure sites. All over the news, we are hearing that Russian hacks might have influenced the Presidential election. I think over the past year alone, LinkedIn, Yahoo, and Etsy were all hacked at some point. This sucks for anyone affected, but this stuff happens all the time. Julep was in the wrong for waiting so long to release a statement, but they didn’t necessarily have practices that weren’t secure that caused this.

I like how they mentioned it was a “third party” hacker 🙂

Eh I don’t love julep but I’ll defend them on this: it’s not really their fault. This is why you as a customer of ANY internet based websites must be vigilant in tracking your bank. It can happen to anyone

So the breach was only between the 6th and 8th? I joined Julep on November 3rd. Ugh this makes me want to unsubscribe 😑

Glad I had already unsubscribed!