Last week I discovered some miscreant had hacked my Marriott Rewards account, and enjoyed stays at the JW Tokyo, JW Kyoto and JW Singapore on my points - 285K of them! Mariott fraud was great; restored my points but had me change both my e-mail account and password...that was last Friday.

Yesterday about 5:05 am all my devices (MacAir, iphone and ipad) stopped receiving email, and asked me to re-enterer my password. I tried, but no joy. I tried to reset my password through Yahoo - my e-mail is/was sbcglobal.net which is a red haired stepchild of ATT. No go

Yesterday afternoon I signed up for a reagan.com e-mail, and have begun the arduous process of converting a zillion accounts to reagan.com since I don't have access to sbcglobal. Of course, like an idiot, my Marriott email and pw were the same as my sbcglobal.

How can I reach someone at sbcglobal/yahoo to see if my password was changed yesterday at 5:05am, and how to get current mail? Or am I fucked?

Though I cannot advise you on contact info for Yahoo, as of late I've been chasing my emails around on my MacBook and iPhone using Yahoo with ATT.

Sometimes recently previous emails that came to my inbox now start to go to junk mail or doesn't come in at all from previous folks in my contact lists. I tried solving it by Asking Yahoo on the web and tried several suggestions tweaking my filters etc, no joy. I finally caved and now just also search my junk mail for important emails that previously came into my normal inbox.

As I mentioned to one such friend that I've recently have to chase his incoming emails around in my mailboxes..."Another Day in Paradise"

I can’t help you with your current problems. But to prevent similar problems in the future, buy password managers for your phone and laptop. They make it easy to have long, multi-character-set passwords. A different PW for each of your accounts.

I have mSecure PW managers on my phone and laptop. They sync. There are many PW managers available, but mSecure works well for me. Nominal one-time cost for a good product.

Also, I’m happy to pay $20/year for the superb FastMail.com email service. I’ve used it exclusively since 2001. Very reliable service, and I’ve never been hacked.

quote:

Originally posted by aileron:
Of course, like an idiot, my Marriott email and pw were the same as my sbcglobal.

If it's been said/written once, it's been a million times: NEVER, EVER SHARE PASSWORDS BETWEEN ACCOUNTS. NOT EVER!

aileron's situation is a perfect example of why.

quote:

Originally posted by aileron:
How can I reach someone at sbcglobal/yahoo to see if my password was changed yesterday at 5:05am, and how to get current mail? Or am I fucked?

If any of your email was of a sensitive nature, you're probably fucked in any event, because whomever gained control of it has certainly by now downloaded a copy of all of it, and will either be looking for additional opportunities or selling the lot of it on the dark web.

You have three iThings. Why aren't you using the Apple email account that comes free with your iCloud services?

As far as recovering access to your sbcglobal/at&t/yahoo! email: I suppose you could contact their customer support. Personally, I'd rather a sharp stick in the eye than ever to have to deal with anything related to the thing that calls itself "at&t" these days, but sometimes you have to do what you have to do.

Your story suggests that, at one point your Marriott password was different from your sbcglobal password. Then, when your Marriott accont was 0wn3d, you changed it to match your sbcglobal password?

So, either Marriott's systems are hopelessly compromised (not entirely outside the realm of possibilities) or, more likely, one of the devices you use, or have used to access it is. If you're using an MS-Windows PC: That would be my guess. If that's true: Then essentially everything sensitive on that PC is now compromised.

Lastly, revisiting the "never reuse account credentials" thing: Get, and use, a good password manager app on all your devices and for all your accounts.

quote:

Originally posted by ensigmatic:

If it's been said/written once, it's been a million times: NEVER, EVER SHARE PASSWORDS BETWEEN ACCOUNTS. NOT EVER!

aileron's situation is a perfect example of why.[/QUOTE]



I've received this message from Yahoo before and never responded. I just ignore any request for any kinds of info and just let it play itself out. If for any reasons my emails just stop, then I'll move on to other choices.

Today, I just got another request from American Express to update my phone number and other details on my account...NOT A CHANCE!

They included this message in the email..
"For your convenience, you can click below to log in to your account and update your personal details." I never click links!


I will sometime contact them in the future per their phone listed on the back of my card and inquire about this. PayPal requested info once and when I reached them by phone, they told me they never request that kind of info thru emails. Way too many scams these days.

Marriott has been having mountains of problems merging their rewards program with the recently acquired Starwood points program, creating all sorts of issues and angry customers.

Marriott was hacked several months ago; it was a very large hack, with a lot of data taken.

quote:

Originally posted by sns3guppy:
Marriott was hacked several months ago; it was a very large hack, with a lot of data taken.

I thought Marriott accounts were not hacked, just other hotels they had acquired. I'm in Marriott Rewards, I assumed I was OK.

"The affected hotel brands were operated by Starwood before it was acquired by Marriott in 2016. They include W Hotels, St. Regis, Sheraton, Westin, Element, Aloft, The Luxury Collection, Le Méridien and Four Points. Starwood-branded timeshare properties were also affected. None of the Marriott-branded chains were threatened."

Complete article from five months ago:

https://www.nbcsandiego.com/ne...mbers-503898941.html

quote:

Originally posted by Sigmund:

quote:

Originally posted by sns3guppy:
Marriott was hacked several months ago; it was a very large hack, with a lot of data taken.

I thought Marriott accounts were not hacked, just other hotels they had acquired. I'm in Marriott Rewards, I assumed I was OK.

"The affected hotel brands were operated by Starwood before it was acquired by Marriott in 2016. They include W Hotels, St. Regis, Sheraton, Westin, Element, Aloft, The Luxury Collection, Le Méridien and Four Points. Starwood-branded timeshare properties were also affected. None of the Marriott-branded chains were threatened."

Complete article from five months ago:

https://www.nbcsandiego.com/ne...mbers-503898941.html

You're close. It was the biggest corporate hack in history.

https://www.bloomberg.com/news...-since-2014-jp3xbq64

Five hundred million users, including passport numbers, credit cards, emails, passwords, everything.

You may have noticed that they re-branded with "Bonvoy." That wasn't a coincidence related to a merger.

My Marriott account was hacked a while back as well. They restored my points and had me set up a PIN number to use points in the future. Much more secure. No pin no access to my points.