Volks USA Security Problems?

A few minutes ago I went to the Volks USA webstore and noticed this:

Issue is, this isn't my account that I'm logged into. I'm unable to log out of the account and when I went to a different page on the webstore, I found myself logged into a 2nd account that again, isn't mine.

Obviously this is a big problem. If I was a person with malicious intent I could access these people's information on their accounts. I'm not sure if anyone else is experiencing this but I highly suggest checking that your account hasn't been compromised and proceeding with caution when accessing the webstore.

I already sent Volks USA an email about this, here's hoping they are already aware of this issue and are trying their hardest to solve these problems.

Earlier I saw one of those green box messages that said I'd been sent a password reset email. I hadn't, nor had I requested one, but I just thought it was an erroneous message. I wasn't logged in...or at least I didn't know I was if I was.

I think I am going to avoid getting anything from the volks usa website for a while.

I want to order because they have some outfits that Volks Japan is sold out of, but I don't know if it's safe to do so.

I'm looking at pages now and not experiencing anything that looks off. But I'm also paranoid about security, so...

Edited January 26, 2020 by cfx

1 hour ago, Daisy-chan said:

A few minutes ago I went to the Volks USA webstore and noticed this:

Issue is, this isn't my account that I'm logged into. I'm unable to log out of the account and when I went to a different page on the webstore, I found myself logged into a 2nd account that again, isn't mine.

Obviously this is a big problem. If I was a person with malicious intent I could access these people's information on their accounts. I'm not sure if anyone else is experiencing this but I highly suggest checking that your account hasn't been compromised and proceeding with caution when accessing the webstore.

I already sent Volks USA an email about this, here's hoping they are already aware of this issue and are trying their hardest to solve these problems.

I saw the exact same cart when I logged in.

Just checked and it's doing the same on my end- if I click my account details it will show my own account (and switch back to my actual cart) but when I click to any other page it'll go back to this account. 

Suuuper weird. 

Edit: with some more clicking it goes to a different account too, wtf lol

Edited January 26, 2020 by Serena-Hime

I haven't logged in, and probably because of that I'm not seeing those other carts, but as I posted above I did once get that message that claimed I had requested a password reset, and again that wasn't with me logged in or even trying to.

I really hope they get all this straightened out soon, and before the lottery in a week.

15 minutes ago, cfx said:

I really hope they get all this straightened out soon, and before the lottery in a week.

I am sure they will postpone, or use an alternate method of entry, if it is still broken on Feb 1st. The dolls don't ship till end of March, so they have plenty of time to hold the lottery.

27 minutes ago, Serena-Hime said:

if I click my account details it will show my own account (and switch back to my actual cart) but when I click to any other page it'll go back to this account. 

When I first saw that I was on a different account I clicked on account details and it showed me the details of the account it erroneously logged me into instead of my own, which is cause for some concern.

Going back to the site just now, it let me access the details of a 3rd account... I'd definitely say that this situation is not good.

Hopefully this all gets fixed relativity soon, especially with the lottery coming up. Like i said, I already sent Volks USA an email about this, if I hear back from them I'll update you guys but I'm not expecting anything more than a generic "We're working on fixing these issues" reply.

The store is back down again for me now.

And I just ordered from them yesterday with no apparent issues. Sheesh.

It still seems to be down, so hopefully they're working on it.

I got a Facebook reply from them this morning and they said they were working on the issue- it was kind of a copy/paste response (it said 'thank you for the image attachment' in part of the message- I never sent an image lol) so I'm assuming they've sent these replies to a few people. 

Honestly kind of a scary security issue and it looks like they're not outright, publicly posting about what happened which is kind of annoying?

Well there seem to be a few updates from Volks on the situation.

First the emailed me back:

Quote

Thank you very much for taking the time to contact VOLKS USA.

And, we truly appreciate your time to inform about this situation.

We are actively working towards a solution and hope to have the Webstore running soon, and we will keep updating you on the situation through Facebook if there are any changes.

We would like to apologize for the inconvenience this has caused.

Thank you very much for your understanding and patience.

Sincerely,

VOLKS USA Web Service Team

Looking at their Facebook, they also posted two updates. I would link them, but Facebook refuses to play nice with me unless I get an account for their site 🙄

It seems they've extended the current pre-orders deadlines to February 5th, while the upcoming lotteries are still going to be happening on February 1st to February 10th.

Volks USA just sent an email to their subscriber list that they are aware of the ongoing technical issues and are working on them, but they don't anticipate this interrupting the Super Dollfie preorder project or the Ranko and Arle lottery.

Link to that email:

https://us8.campaign-archive.com/?u=db9ef354023359ab0480915d2&id=68ecd411ed

Edited January 28, 2020 by cfx

Something like that happened years ago at another site I order stuff from.  I'd log in and see someone else's cart.  I'd also see the other user's name.  But if I attempted to go into account information, I'd see my own info.  If I added anything to the cart, it was as if I had logged out and added something to the cart.  Then if I'd log back in, I'd see the other user's cart, but not my item.  I forget how long it took them to get that straightened out.

 

The webstore seems to be back up now. I'm not noticing any issues, so hopefully everything is back to normal and there won't be any more problems in the future!

I just spent a while poking around the store with no issues, so it's hopefully fixed!