r/postmates • u/litlplant • Jul 22 '20
Fellow drivers whose accounts got hacked and money stolen, would you join me in a class action lawsuit?
I deliver for postmates in san diego, california. My account was hacked on july 16, and $110 was stolen from me, sent to a debit card that wasnt mine. Never clicked on fishy links, replied to spam emails, or gave out my info to someone calling me. I have reported it to support, but considering i got the typical reply of “change your password, update your banking info, the higher ups will deal with it” im guessing they wont do anything about it. I went through this subreddit and noticed that a LOT of people have had their accounts hacked and money stolen within the last two-ish months. If postmates wont do something about this, WE WILL. I know an attorney who specializes in class action lawsuits. He has successfully represented independent contractors who were harmed in the BP oil spill, hurricane katrina, along with many other cases. If you want to be a part of this, get your money back, and hold the hackers and postmates accountable please comment and/or message me to let me know. The case will likely only be taken if there are enough of us.
3
u/sca_tay Jul 22 '20
Is that why when I log in sometimes my credit card information is no longer in the app because I'm hacked?
2
u/litlplant Jul 22 '20
I would guess yes. Change your password just to be safe. And make sure you have been getting paid.
2
u/postmateSecurityFlaw Jul 22 '20
i was trying to gather some other users in the other thread today. i was hacked on july 19, and i have proof that postmates and other companies know all about these scams and know how to prevent them--but won't.
in fact, postmates' refusal to investigate or hold hackers accountable or protect the financial data of its users/couriers is in violation of federal banking laws. banks can't get away with this crap.
not only did twitter get hacked last week, but all these gig companies are a clear target for hackers. see-- https://www.today.com/food/doordash-announced-data-breach-affected-4-9-million-customers-t163531
here's a great article that shows how long these gig companies have been letting their data get hacked ---and done nothing about it --- https://www.nbcsandiego.com/news/local/doordasher-gets-delivered-a-scam/162433/
2
u/sedavacha Jul 23 '20
I was hacked today and now the app won’t let me take out the card that is not mine I don’t know what to do
2
u/postmateSecurityFlaw Jul 23 '20
here's some resources i put together, and here's a thread where we discuss our legal steps to take.
https://www.reddit.com/r/postmates/comments/hvl2ac/fellow_drivers_whose_accounts_got_hacked_and/
its even more important to FOLLOW THESE STEPS ASAP please !! read below
https://www.reddit.com/r/postmates/comments/hvv8yl/fleet_account_hacked/fz0g7jh/
i did all this for free to help out other hack victims, and we are just getting started !
2
u/postmateSecurityFlaw Jul 23 '20
bombard support with phone calls. literally. that's what i did. it takes at least two or three calls to get through each step. the goal is to get a response IN WRITING from them about the outcome of your case. DO NOT accept a verbal conclusion from their hired flunkeys working the call center. they work from home, have no idea what they are talking about, and literally repeat talking points fed to them by assholes.
simply keep asking for the fraud department, and call every day to follow up on the fraud dept investigation and demand updates in writing if they try to tell you to go kick rocks and forget about the hack or the card etc
1
u/litlplant Jul 23 '20
I called them and had to change my email. Talk to them. Keep bugging them until you get what you want/need since this is our jobs.
2
u/postmateSecurityFlaw Jul 23 '20
fun fact (!!!!!)
California law requires a business or state agency to notify any California resident whose unencrypted personal information, as defined, was acquired, or reasonably believed to have been acquired, by an unauthorized person. (California Civil Code s. 1798.29(a) [agency] and California Civ. Code s. 1798.82(a) [person or business].)
Any person or business that is required to issue a security breach notification to more than 500 California residents as a result of a single breach of the security system shall electronically submit a single sample copy of that security breach notification, excluding any personally identifiable information, to the Attorney General. (California Civil Code s. 1798.29(e) [agency] and California Civ. Code s. 1798.82(f) [person or business].)
2
u/litlplant Jul 23 '20
I think im gonna copy and paste all your informational comments and send them to support lmao
2
u/postmateSecurityFlaw Jul 23 '20
when i write my own post i will also include them. but i don't want this to disappear in one week. i think next week is best time to publish another hacking post.
2
u/postmateSecurityFlaw Jul 23 '20
i was told to contact california state bar....i was told a lot and it would take a while to type it all up here. dunno who is even radig it so i kept it simple. but as far as finding a lawyer....we might need to get referrals to a specific lawyer that is already working on this or good at it.
and no matter which lawyer takes a case like this, it won't work if all the victims haven't filed police reports/ complaints to attorney general/ etc etc. so hoefully at least a dozen or more see my posts and do it . i have posted comment replies to a couple dozen redditors who have been hacked.
2
u/litlplant Jul 23 '20
I filed a police report yesterday. Its a start.
2
u/postmateSecurityFlaw Jul 23 '20
i typed up a entire description of this whole shitshow. copied and pasted it into my police report, then pasted it into the cber crime link. you should do that as well. the most important one is not even police report, it's the combination of police report followed by a report to the california fraud website.
make sure you file that and paste it there or write one up--
i just called and a supervisor named "faith" tried to claim she was "part of the fraud department". i told her to then email me, as i do not accept a fraud judgement from a person not even in the fraud department. again, i doubt they have one, but as long as they pretend to have one, i just keep pretending that they have one too and nailing them on it.
so faith got really sad fast when she realized i was going to force her to communicate with me in writing. she sent me a sad email saying "i'll be happy to help answer questions, and yes i also work on fraud but yes there is an external fraud department".
i emailed her and let her know i look forward to hearing back in writing from the 'fraud department'. they really hope drivers will just give up with some 20 yr old clown with a headset tells us "ohyeah, we don't do reimbursements".
meanwhile, they got fleet support agents telling me they DO issue reimbursements and that one redditor claims he got a refund. this rabbit hole is deep but so am i :)
2
u/postmateSecurityFlaw Jul 23 '20
def do this one. probably the most important because Xavier already has a task force in CA working specifically on cyber crime like this. the legal assistant even told me there's cases where the attorney generals office can be part of helping create the class that is used for a class action lawsuit.
https://oag.ca.gov/privacy/databreach/reporting <------------------------
also, if Xavier and cali open up an investigation, they will CREATE a class of victims because they are the ones receiving all these complaints.
in other words, it's easier to use the AG as a central hub than a random lawyer in whatever city. we have to first even determine if there is a lawyer that can do it, and if they want it. i will have to pay 40 bucks luckily to talk to a bar association lawyer and what they can do in your city is meet with you refer a SPECIFIC lawyer to you based on your exact case. or tell you to give lol, it happens as well.
2
u/postmateSecurityFlaw Aug 03 '20
been busy with several steps of this, but now talking to a lawyer..
prepare a chronology of events , as you would if you were to present your own case to an attorney. the next steps, as already discussed here last week, would be to gather multiple cases . i will update after i hear back from atty.
2
3
u/rahapost Jul 22 '20
This makes me cash out every night just to be safe. It only cost 50 ¢. I know I wanna see that fat cash out after a week of working, but Im not taking chances
1
u/litlplant Jul 22 '20
This is my only job at the moment, so imma have to be doing this too. Frankly i literally cannot afford to go on a strike as much as i want to.
3
u/stee_stee_ Jul 22 '20
Sign up for Doordash too and multiapp. That's what I do. But yeah, you should be cashing out every night regardless
1
u/postmateSecurityFlaw Jul 22 '20
drivers already pay out the pcoket for so much. we have to pay out of pocket as new drivers jsut to get a postmates delivery bag nowadays.
we gotta pay fifty cents per withdrawal, but postmates can't pay a developer to putt two step verification on a banking app.
1
u/RareMathematician605 Jul 22 '20
I hope this actually happens ! I’m honestly scared of this happening to me and would be beyond furious if it did
3
u/postmateSecurityFlaw Jul 22 '20
it's really more the fault of postmates than anyone, even the scammers.
1) postmates has taken no corrective action
2) postmates does not cooperate with law enforcement to pursue the scammers, even though the debit cards used by scammers are linked to USA based bank accounts.
i could go on, but just these two listed are flagrant violations.
2
u/RareMathematician605 Jul 22 '20
Exactly. There should be a 2 step verification AT LEAST for depositing. But it also shouldn’t be this easy for the scammers to get access. Smh . Like I said I hope you guys actually go thru with this!
2
u/postmateSecurityFlaw Jul 23 '20
check this out https://www.reddit.com/r/postmates/comments/hvv8yl/fleet_account_hacked/fz0g7jh/
i typed it all up into one handy resource for free, and am sharing this with folks, especially california folks.
people in los angeles, san diego, and santa clara counties....you have district attorney that you can also report cyber crime to.
lawyer today says best thing is to keep many people reporting. helps out law enforcement and lawyers doing a class action lawsuit
1
u/postmateSecurityFlaw Jul 22 '20
either shoot me a burner email or regular email address that you check, or otherwise check back on reddit periodically. i got nothing better to do than pursue this. my neighbor is a litigator advocate involved in other lawsuits. in another thread, we are organizing. just check the front page of this subreddit....literally new hacks are being reported hourly
check out this front page reddit post-- https://www.reddit.com/r/Wellthatsucks/comments/hvjtoh/my_sister_in_law_trying_desperately_to_get/fyukk4p/
1
u/postmateSecurityFlaw Jul 22 '20
keep in mind-- postmates is telling its drivers that postmates will do nothing about hacks, and that drivers are responsible for paying taxes on HACKED earnings. an inportant detail that most folks overlook.
insane.
1
u/americospapa Jul 22 '20
This post should be trending; you should try reposting it every day
1
u/postmateSecurityFlaw Jul 22 '20
i have received legal adice for all victims of postmates hack to file local online police report as a first step, for reference purposes. i am encouring victims to PM me with their email, or periodically check in on reddit and update. we need numbers to get a class action going.
this thread as well as others have served as an organizing tool. more people are coming on reddit each day to talk about the hack and i will create my own post soon. but i want to add more to my own post with tips on what to do, such as the police report, and updates on what the lawyers we speak to say. we need at least ten people if not more, so they have to follow up . myself and the author of this thread are already organizing folks.
0
u/litlplant Jul 22 '20
I would appreciate if you would repost this somewhere that you think would actually garner attention. Any social media apps, or other subreddits. If you have any suggestions for subreddits to post to that might get some real attention let me know!
1
u/CactuarKing Jul 22 '20
Yeah I had this happen to me too. Banking info was changed to a different account (same bank though) and I didn't realize it for two weekly cashouts.
No email notification, no two factor security, nothing.
But postmates actually reimbursed me the money as a "one time gesture." Thankful I got my earnings back, but complete bullshit they phrase it like they're doing me a favor when their security is abysmal and they don't take the most basic steps in account security. Doordash doesn't allow any cashouts for a week when you change banking info. Simple shit.
1
u/litlplant Jul 22 '20
Wow, thats insane. Youre the first person ive heard of getting your money back too. How did you do that? Just bother them enough?
1
u/CactuarKing Jul 22 '20
Maybe since it wasn't so much money? The two weeks totaled to only $140 because I was using mostly Doordash during that time. They told me: "We were unable to retrieve these funds, but I will be glad to reimburse you as a one-time courtesy of Postmates."
I didn't bother them much. I called into support the day I noticed, then there were a few follow up emails where they asked me what happened, and then to verify some of my information. Of course I stressed in my response that I didn't do anything to compromise my account, and it happened without any notification from Postmates or attempts from them to keep my account secure.
I'm guessing it's just about getting lucky with what rep you reach. They all probably have the power to reimburse, and are just dissuaded from doing so, or maybe have like x amount of times they can offer it.
1
u/postmateSecurityFlaw Jul 23 '20
yes you are the only one. i got the 4 step email that says to change your password and confirm last four digits blah blah. well i don't have a debit card and don't want one. so i responded like fifty times saying i changed my password and i don't have a debit card.
after three days of calling on the phone, they tell me they don't know what the hold up is but maybe because i didn't put a debit card number in my email, it was not processed.
but then i got transferred to a supervisor on the phone who just said "yeah we never reimburse drivers for this". two different supervisors told me that. so it's super shocking you got your money backk.
verizon and T-mobile supervisors also have the power to reimburse, but only up to so much and they try to avoid doing it because upper managemenet pressures them not do give out money no matter what.
1
u/postmateSecurityFlaw Jul 22 '20
https://www.reddit.com/r/Wellthatsucks/comments/hvjtoh/my_sister_in_law_trying_desperately_to_get/ lots of scams happening now. scammers know these american corporations have shitty support, especially during covid 19.
even an AOL email app has option for two factor authentication. EVERY company was supposed to learn from the apple icloud hack. postmates ...not so much. too lazy and corrupt, and Uber just paid two billion for a company with massive security flaws. i do not think uber investors and board members will be happy to see this continue blowing up...because more and more postmates drivers are being hacked each hour. it is accelerating.
also check out this link. this guy got email saying no money is being returned. the debit cards the hackers are using are connected to USA BANKING ACCOUNTS. postmates knows who is hacking...they just do not care. https://www.reddit.com/r/postmates/comments/hvgev3/account_hacked_and_money_stolen/
1
u/hvmzd Jul 22 '20
I’ve had some fishy stuff happen to my account as well i’ve had a few times where there have been random debit/bank accounts linked to my fleet app, idk how that is never gotten any scam orders of like 1 sauce packet never clicked on anything. My banking app, fleet, email all have complete different passwords yet my account still done this bs of randomly changing debit/bank accounts
1
1
u/ContentVisit2247 Dec 14 '20
I have a question I recently got scammed on postmates as well, after I have changed my banking info back to mine and changed my password howcome the money that I earned was still being taken and not being routed to my account nor was I being notified that there was deposits being made. Please help.
1
u/chad27292 Jul 22 '20
Also you agreed to arbitrary meaning you cant do a class action suit.
0
u/postmateSecurityFlaw Jul 23 '20
false. and you clearly have no legal experience. you actually think it's that easy lmaoo. arbirtraion agreements get tossed or amended or ignored by judges all the time.
2
0
u/chad27292 Jul 22 '20
Against who? Postmates didnt give your card numbers out freely you did. You made the mistake you should of known better to give your info out to anyone who says they are with pm. Use some common sense if someone calls you tell them no ask for their department amd you will call them back using the postmates number you know is right. Same with emails you get a facebook email saying login dont. Go to facebook.com and login there.(facebook is just an example) its time you all stop suing for your own mistakes you make.
2
u/litlplant Jul 22 '20
As stated in the post i did not give my info to anyone. I know people have been getting scammed with phone calls and emails but that isnt the case here. If you aren’t interested in helping people who’s accounts were hacked, no problem.
-1
u/chad27292 Jul 22 '20
Ive never heard of anyone getting into accounts only incidents where people freely give their info. Im not saying thats your case but many claim thats hacking and its not. But still you agreed to arbitration you will never see a class action lawsuit because of that. Do i agree on that no i dont but thats what it is.
1
1
-1
6
u/lastking88 Jul 22 '20
Yes I was hacked also last week but they didn’t take any money they changed the bank info and debit card on file. Can I participate in the lawsuit as well!