JRR shop info etc

[simmo75]

May have to say goodbye to that extra FORUM discount, I guess.
Sucks, but maybe not worth any potential security risks currently.

So has it been confirmed there was a data breach?

how did you get that from that quote? I don't think anyone knows anything.

I derived that he was saying he wouldn’t buy from JRR because of potential security risks...

So I was asking if it was confirmed that there was a data breach as I’m also a JRR customer but had heard a different reason (too much traffic from S15) for the site being down.

[Calenberger]

It's not their first downtime.
There was one during Black Friday a couple of years ago.

[Uncle E]

I was posting over at the Bargain thread, but see there is a thread here.
I was wondering if there had been a data breach (a hack) and that our passwords have been compromised?
I just logged into my account, and there's only one order showing; actually my 1st order from JRR, but the rest (about 5 others) are not showing.

I apologize for the trouble and any concern. There has not been a data breach and passwords have not been compromised.

We are still in the process of migrating orders. If there is anything you need in the meantime, please PM and I will be able to find your licenses for you in our system.

[Uncle E]

Cannot log in either here, password recovery works but I'd rather not use it at this time in case you manage to fix the database issues

I apologize for the trouble. When the site crashed, the database was corrupted and we had to rebuild many customers' accounts. Unfortunately, there wasn't a way to rebuild passwords. Please get a temporary password at the following link and then you will be able to set your password to the one you had before:

https://www.jrrshop.com/customer/accoun ... tpassword/

[ATS]

Thank God you chimed in; I could see stories of alien abduction coming up next.

[Uncle E]

Hope there hasn't been any major issues that might have compromised any sensitive information. All the best.

No sensitive information was compromised. The site crashed from being overloaded with Studio One 5 traffic and then a series of mistakes made by me and the people I hired caused it to be a much larger problem than it should have been. If even one of those mistakes had not been made, we would have been down for 24 hours instead of 2 weeks.

[Uncle E]

perhaps a message on the website itself, on the front page, for example, explaining about the problems, and what to do when your account isn't accessible. not everyone is on KVR, or perhaps, everyone is.... but reading a whole thread, i do it also sometimes, it is bit like in every forum, that people don't look (i mean i do it also sometimes, don't read the whole thread) what is posted already, and the confusion, will stay.

Thank you for your kind post! Yes, you are right, I will work on that now.

[Uncle E]

I sill get a

SQLSTATE[42S02]: Base table or view not found: 1146 Table 'jrrshop_mage_LS.orders' doesn't exist, query was: SELECT COUNT(*) FROM `orders` AS `main_table` WHERE (`customers_id` = '23082') AND (`orders_status` IN(1, 2, 3, 4, 5, 8, 9))

when I go to my account, click on Recent Orders and View All

And it still shows my orders only until 2018.

Yes, I apologize, we are still migrating orders. It is taking much longer than I anticipated. I apologize for this delay.

[Uncle E]

Ive has these issues recently:

Added the Seventh Heaven reverb that was a featured sale to my cart, but the price never reflected the advertised sale price even up to the checkout submit.

The currently featured Steven Slate expansions can't be accessed through the featured deal page.

Earmaster 7 can't be found when clicked on in the featured specials page.

I love JRR for plugs, please fix!

I apologize for the trouble. I can definitely get the Earmaster and some of the Steven Slate deals back for you, and I'll do what I can about Seventh Heaven. I'll PM you now.

[Uncle E]

As an IT guy, I see enough red flags here (unexplained downtime, lack of recent backup, no disaster recovery plan) for me to user other resellers.

Yes, that is a fair assessment. I can only say that I have 100% stopped using the IT team that caused it to be as bad as it was.

[Uncle E]

Search is not working either. Used to show older versions of software. Now, nothing.

Thank you. It is now fixed (albeit slow).

[Uncle E]

May have to say goodbye to that extra FORUM discount, I guess.
Sucks, but maybe not worth any potential security risks currently.

There was never a security risk. The site crashed from all the traffic over the Studio One 5 launch. When it crashed, the connection to the database was corrupted.

[Uncle E]

Did anybody find out if there was a data breach?

There has not been any sign of a data breach. We actually were able to identify the exact thing that caused the crash and it wasn't external.

[Uncle E]

I don't really see any data that would be so bad if they got mine. I always used paypal so I don't have a credit card on there thank goodness. Everyone knows my name already haha just kidding

We never store credit cards. Credit card numbers actually never pass through our site, the go straight to PayPal or First Data.

[Uncle E]

Today I've found out that I have few critical events in Bitdefender logs for jrrshop.com for 9,11,12 of July stating that firefox was trying to connect to jrrshop.com using an untrusted certificate. First event occured on 9.07.2020 at 11:45 PM GMT.
I completely forgot about those events. Since I was visiting jrrshop every other day those were suspicious, I thought they're messing with the site.
They offered Studio One 5 on 7'th of July and site's database crashed right after. I believe webserver certificate is not stored in a database so it must have been someone's attempt to solve jrrshop website issues. It's possible that database may have been broken by those repair attempts.
It doesn't mean jrrshop.com experienced an attack and was compromised.

Thank you. Yes, you are exactly correct on all counts.

I'd suggest to better communicate issues to clients, I think lack of any information in the official channels (email, facebook, etc.) was the main concern for clients.

Yes, you are right.