I posted about this briefly via my Facebook wall, but wanted to let everyone know more details about the Security breach from No More Rack.  Your personal information may have been compromised.

Here is the scoop:

Customers would log into their own account and they were then directed to a completely different account.  They were able to view personal information including, email, name, address, phone number and anything else stored in the account. 

No More Rack has issued a statement claiming that no credit card information was compromised, but a blogger friend of mine reported, along with several others, that she was able to see credit card information during the checkout process.  Some people said that the credit card information had the last few numbers as an “x” but others are saying that they saw complete numbers, expiration dates and CID security codes. 

What is more disturbing to me is how the company has handled this breach of security.  The breach supposedly happened last night, but they did NOT shut down the site.  They also deleted comments about the breach that people posted on their Facebook wall.  I understand that security breaches can happen to even the most reputable companies.  But, if it does happen… the site should be taken down immediately.  Customers should also be informed via email and not just a post on Facebook.  The information that they are given should be the whole truth and not their spin on the truth. 

If you have an account with No More Rack and have ever made a purchase or stored your credit card information with them, I recommend that you cancel that credit card immediately.  Also, inform your bank and check your accounts over the next few days and weeks. 

You are not able to cancel your No More Rack account by logging into the site, but you should be able to cancel the account by using live chat or sending them an email.  Some users are reporting that they are not able to log out of No More Rack once they have logged in, so keep that in mind. 

The way that they have handled this breach of security is unacceptable.  As such, you will never see me promote this site again in the future because I am concerned about your privacy and security.  I have not promoted No More Rack in over a month, but I apologize to anyone who may have signed up based on my promotion.