CimCommerce v1
BoxUP Multiple Fraudulent Orders
Incident Resolved: CTIM-2372
Dev teams have implemented immediate mitigation measures to block the current fraudulent activity, with additional security layers to be scheduled for deployment in the near future. The incident is currently contained. CTIM will provide a critical-level postmortem in the coming days.
Please contact CTIM or see ticket for more details.
UPDATE:
Support teams are determining next steps towards remediation. Next update in 1 hour or sooner.
UPDATE:
BoxUp dev teams have started their investigations. next update in 30 minutes or sooner.
UPDATE:
Commerce Support has investigated and see these orders from the website as valid. Teams are awaiting to hear from the BoxUp development team to investigate further. Next update in 30 minutes or sooner.
UPDATE:
Escalation sent to: BoxUp Dev
Engaging BoxUp development team.
New Incident: CTIM-2372
Priority: Critical
Escalation sent to: Commerce Support for review.
CTIM is investigating an issue with BoxUp receiving multiple orders back to back with no addresses. From previous incidents, BoxUp believes this could be due to fraudulent activity. Engaging support teams to investigate at critical priority. Next update in 30 minutes or sooner.