Public Discussion Forum

i received this in an email marked Selene Owners Association from a Rudy Ward <rudy05.ward@gmail.com>

Hi Brian,

I'm checking in to be see sure you want to get the Distribution/Member List.

• Selene Owners Association (Washington,USA,2025)

• 1,000+ Contacts

I'm waiting for your response so I can let you know the cost & more details.

Regards,

rudy – Business Executive

I had the same email but from another person so yes I would say this is a scam.

Thanks for posting!

got it as well, from the same account. Looks like a spam to me and I just deleted it. If it is spam I'm more concerned about where they got the mailing list from.

Joe and Linda

401 Play

2009 Selene 55078

Hey Team:

Yeah....a handful of our members got this scam email. The scammers aren't the sharpest tool in the shed---trying to sell the database to the very people who have access to it. :-)

I've forwarded the email to Club Express to see if they have any evidence that their database was compromised. It's hosted in Amazon Web Services Cloud. Nothing is "bullet proof", but Amazon is pretty secure.

I also just wanted to re-assure everybody that even if this person/organization was able to actually get the database, all they got was contact information. There is no credit card information in the database because Club Express uses a third-party payment processor (Stripe) to handle all payments, so even if you did use a credit card to pay for and/or renew your membership, that card number is not in the member database.

So.....don't lose any sleep over it. I will definitely pass along anything useful I hear from Club Express.

Capt. Mark Tilden

Selene Owner's Association President

Selene 60 "Koinonia"

I think they likely scraped the posts but I don't see email addresses in public. So my guess is either they were granted access, as a member, which I doubt due to the screening that is done or a member has been hacked and they got the scammer is using the hacked credentials.

Joe and Linda

401 Play

2009 Selene 55078

AWS isn't inherently any more or less secure than anything else if the people building systems running on it have vulnerabilities in their systems. More correctly you can build secure systems using AWS, or not.

My money's on: https://www.openbugbounty.org/reports/4404412/

We apparently can't remove some of our PII out of our site profile. Can we change the site settings to make that non mandatory.

Forums retain original PII when values are changed to nonsense values to avoid PII disclosure. Can we have the vendor address that.

I got another one of these emails today, it was to the old email address from pre the 15th, not the new one I changed it to. Any update from the vendor?