Just got a letter in the mail from aim surplus saying their security measures have been compromised. They are offering a free year of experian security as well.

 

Keep an eye on your reports fellas

 

Sent from my SM-G900V using Tapatalk

Yep, got my letter too.

Just got my letter as well

Does the letter say what timeframe the breach occurred? I've purchased from AIM for work purposes but haven't received anything (yet) from them regarding this.

Got mine today... all it says is April 4, 2016. If you uploaded before than, I guess you are a part of it.

I didn't see anything that stated exactly when it happened, the letter I received said they were notified on April 4, 2016.

i ain't bought from them for over a year....ain't seen anything in the mail yet.......

If you happen to recall which credit card you used there, request a replacement.

 

If you have an online account there, and the same password is used anywhere else, change that password on the sites its used.

 

The last thing would be if they used security questions....for password resets... Try to figure out what they were and do your best to avoid using the same responses elsewhere.

 

Typically what happens is the information is posted on criminal sites that sell cc info along with other personal info. Sometimes the info is just posted publicly.

 

Making the information useless is the best thing you can do to limit the damage.

 

Don't wait. Sometimes these scum bags move very fast.

http://www.thefirearmblog.com/blog/2016/04/30/breaking-aim-surplus-database-breach-compromises-customer-data/

 

The breach was of their ID Database, not your CC info.  Dunno if it's better or worse.  Driver's license numbers aren't really that secure anyway..

Good thing for me, out of the two credit cards I could have used, both were changed within the time in question (one got the chip, the other was part of the Target breach). Password was so old that it took me like three tries before I got into my account, so good there (isn't one that I use with any other account, at the moment).

 

They could have my address, cell, and whatever is on the FID (don't think I uploaded my D/L). I have credit monitoring through a higher end company, as well as two of my three card companies.

 

To be honest, I'm not too happy with an offer of free year of credit monitoring. I kind of stopped using them after their stance on AR lowers, but unless they send out a coupon for a fair amount to all those involved, AIM likely won't get much more of my service. I picked up a .410 upper years ago, and an Aimpoint PRO a few less years ago.

The breach was of their ID Database, not your CC info.  Dunno if it's better or worse.  Driver's license numbers aren't really that secure anyway..

I wouldn't assume they were successful in determining the full extent of the breach and that it's been fully remediated. The probability that it was more extensive than they know is a safer bet than they've fully contained it.

Got mine in the mail yesterday, not happy about this at all. For a company that specializes in online sales they should have taken appropriate measures to secure customer data. Sure, they notified everyone nearly a month after it was discovered but whoever setup and manages the company site should have thought about this from the beginning.

 

Now someone has my FPID (AIM required front AND back when I first ordered) and my DL, Not that the NJ FPID is any good outside of NJ but still concerns me.

 

I've bought nearly a dozen guns from AIM between 2013-2016 and tons of ammo, never again will I do business with them. Plus they refuse to ship AR lowers or AR bolts/carriers to NJ buyers...wrote them off.

 

I guess it's back to J&G and Classic

I knew they didn't sell lowers but now they won't sell bcg's??

 

Sent from my SM-G920V using Tapatalk

I knew they didn't sell lowers but now they won't sell bcg's??

 

Sent from my SM-G920V using Tapatalk

 

Last year they cancelled my BCG purchase, saying it couldn't ship to NJ. Can't find mention of it on the site: http://blog.aimsurplus.com/state-product-restrictions/new-jersey/

Got mine in the mail yesterday, not happy about this at all. For a company that specializes in online sales they should have taken appropriate measures to secure customer data. Sure, they notified everyone nearly a month after it was discovered but whoever setup and manages the company site should have thought about this from the beginning.

 

Now someone has my FPID (AIM required front AND back when I first ordered) and my DL, Not that the NJ FPID is any good outside of NJ but still concerns me.

 

I've bought nearly a dozen guns from AIM between 2013-2016 and tons of ammo, never again will I do business with them. Plus they refuse to ship AR lowers or AR bolts/carriers to NJ buyers...wrote them off.

 

I guess it's back to J&G and Classic

Get used to it, companies MUCH bigger get hacked. Sony PS4 was hacked. It's just a matter of where when and how much effort someone is willing to undergo for personal info databases.

I knew they didn't sell lowers but now they won't sell bcg's??

 

Sent from my SM-G920V using Tapatalk

I just bought a NiB bcg the other day from them on sale, and arrived 2 days later

I just bought a NiB bcg the other day from them on sale, and arrived 2 days later

 

Lucky you, I ended up having to find one elsewhere. Circa 2015, unless things have changed (seems they have).

 

I'm waiting to see if they release anything on Monday when they resume operations, seems they are trying to keep this quiet. On FB and twitter they deleted hundreds of complaints, some show up still (overlooked?) no post from AIM about it...

I received a letter as well. Does anyone know if the FID in addition to the drivers liscenses were obtained? If so, how do I protect the use of my firearms ID card? What would happen if they started purchasing firearms in my name? This could brand all of us as criminals.

We don't have mail delivery here on Saturdays, will see tomorrow if I got one.

I received a letter as well. Does anyone know if the FID in addition to the drivers liscenses were obtained? If so, how do I protect the use of my firearms ID card? What would happen if they started purchasing firearms in my name? This could brand all of us as criminals.

 

If you uploaded the FPID to purchase ammo, yes, it was likely compromised along with the DL. Safest bet: File a police report and keep a copy of it so if anything happens with your ID you have proof to backup your claims.

We don't have mail delivery here on Saturdays, will see tomorrow if I got one.

 

Letters have a PA return address on them, FYI. I almost trashed it since it looked like junk mail (not the Middletown OH address)

Just got a letter in the mail from aim surplus saying their security measures have been compromised. They are offering a free year of experian security as well.

 

Keep an eye on your reports fellas

 

 

thanks for the heads up, I haven't received any notice from AIM yet so I emailed them... so we will see...

 

 

I wouldn't assume they were successful in determining the full extent of the breach and that it's been fully remediated. The probability that it was more extensive than they know is a safer bet than they've fully contained it.

^

^

this

Just cancelled my AMEX card I use for ammo, have a new one on the way.

 

Checked and found out I still have a freeze (which I requested) on my credit report from last year so I should be good to go at this point. Still unnerving...

just to follow up I received and email back and was advised I was not affected. FWIW my last order was in December

I contacted aim and they said according to their records just my drivers license was affected. I looked up their free ProtectMyId Service and it was getting horrible reviews. To protect myself I think I am going to purchase Life Lock for a couple of months.

I contacted aim and they said according to their records just my drivers license was affected. I looked up their free ProtectMyId Service and it was getting horrible reviews. To protect myself I think I am going to purchase Life Lock for a couple of months.

 

I was a little skeptical about it (protectmyid) didn't bother signing up.

 

I already get a copy of my report from one card issuer every month at no charge, plus the freeze so I should be covered. You know you can put a freeze (temp.) on your report, right?

no letter today

I got my letter.

 

I was a victim of Identity theft in 2007, and was protected by a credit lock until 2014.  In 2014, the Target breach got me 1 year of monitoring and now this will extend it another year. 

 

Trust me on this, sign up, it's free.  You do not want to go through what I did.

I went to the police station the other day and filed a police report to be safe.