Someone Stole my Disney E-gift funds!

[isabellea]

Thank you for the heads up. I just removed my GC from the site and when I will combine in the future I will add my cards to combine and then delete everything until next time. Not taking any chance with my vacation money!

Could you transfer the money on a physical GC and then delete it from the website?

 

[SL6827]

If only that was possible. People use the same info because Disney requires it. All Disney related sites are forced to have the same info.

Mine is different.

 

[havaneselover]

Mine is different.

Mine is too.

 

[lcc2]

Just tried again and it changes passwords for all sites. Annoying. I’m gonna call them about it as it’s been bothering me.

 

[Searc]

disney+ wasn't hacked, but often people use the same password for all their online accounts.

It sure was. https://www.washingtonpost.com/busi...sney-accounts-were-hacked-sold-online-little/ It was all over the news when it happened.

 

[Searc]

disney+ wasn't hacked, but often people use the same password for all their online accounts. These accounts tend to use their email address as the username.. So when a new service like disney+ comes out, people will try the email/password combo they got from other sites and lo and behold it works. At that point they could also try the same login/password on disney's gift card site. Everyone should be using a password manager and a different password on EVERY single site they use.

I'd love to use a different password on every single Disney site...but they won't let you. Once you change one password, they are all changed. They require you to use the same password across multiple Disney platforms.

 

[Party.Of.4-NY>>>FL]

I'd love to use a different password on every single Disney site...but they won't let you. Once you change one password, they are all changed. They require you to use the same password across multiple Disney platforms.

If you use a separate email address for each of your various Disney accounts (MDX, Disney+, Disney Gift Card, etc.) you will be able to use a different password for each of those sites. Not ideal, I know, but better than putting all our eggs in one basket.

 

[ilovetotravel1977]

My passwords for the gift card site and MDE are different...

 

[georgina]

My passwords for the gift card site and MDE are different...

Mine too. And I use the same e-mail address as user name. The gift card website required a longer password than MDE does, so they are definitely different.

 

[afan]

My passwords for the gift card site and MDE are different...

Mine are also different and I've changed my pw on the giftcard site recently to something brand new and only used there. Though when I finally do Disney+ I plan on using a different email so I can have a different pw than MDE, I don't want them the same and think it's ridiculous they make it the same.

 

[Mome Rath]

It sure was. https://www.washingtonpost.com/busi...sney-accounts-were-hacked-sold-online-little/ It was all over the news when it happened.

From a technical stand point, they are using the wrong terminology, as was discussed in the days after it happened. Disney+ wasn't "hacked," people already had their info taken from elsewhere on the web, and the thieves could use the previously hacked info to log into Disney+ because the email (and many times a password) is the same across accounts.

"Disney has now responded, saying only a “small percentage” of the service's 10 million-plus users have seen their usernames and passwords compromised and that Disney Plus systems were not breached by hackers. “We have found no evidence of a security breach,” a Disney rep said in a statement to Variety." From Disney Responds...

Instead of being hacked, the theft didn't occur on Disney+, it was what is known as credential stuffing. And is usually the result of people not changing their password and other credentials regularly.

 

[clee152]

From a technical stand point, they are using the wrong terminology, as was discussed in the days after it happened. Disney+ wasn't "hacked," people already had their info taken from elsewhere on the web, and the thieves could use the previously hacked info to log into Disney+ because the email (and many times a password) is the same across accounts.

"Disney has now responded, saying only a “small percentage” of the service's 10 million-plus users have seen their usernames and passwords compromised and that Disney Plus systems were not breached by hackers. “We have found no evidence of a security breach,” a Disney rep said in a statement to Variety." From Disney Responds...

Instead of being hacked, the theft didn't occur on Disney+, it was what is known as credential stuffing. And is usually the result of people not changing their password and other credentials regularly.

The Skyliner accident also wasn't an "accident" according to Disney and their technical standpoint.

 

[bakerworld]

Question: if you combine your balances to one GC and then delete that GC do the funds stay on the deleted card?

 

[MickeyMouseCD524]

Question: if you combine your balances to one GC and then delete that GC do the funds stay on the deleted card?

Yes it's just not in your profile on the website any more.

 

[bakerworld]

Yes it's just not in your profile on the website any more.

Thank you - I think I will take mine off the site until they figure it out.

 

[Mome Rath]

The Skyliner accident also wasn't an "accident" according to Disney and their technical standpoint.

Two completely different uses of the term "technical." It's important with the Disney+ situation because it's user issues that need to be corrected (people need to use different passwords, complicated passwords, and to change their passwords, Disney can't do that for them and that was the issue here; Disney+ was not hacked).

 

[clee152]

Two completely different uses of the term "technical." It's important with the Disney+ situation because it's user issues that need to be corrected (people need to use different passwords, complicated passwords, and to change their passwords, Disney can't do that for them and that was the issue here; Disney+ was not hacked).

Nope.

 

[Mome Rath]

Nope.

Yes, actually. People need to read up on it to understand so they can better protect all their accounts, not just Disney. Misinformation does nothing to help others.

 

[jeff_h]

Thank you - I think I will take mine off the site until they figure it out.

Same thing I just did - thanks to the OP and sorry about your predicament, I hope it get straightened out soon!

 

[cteddiesgirl]

I've just changed my passwords for both the main Disney site and the gift card site to different ones. My D+ account also has a different password. Same email address for all.