BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 01-01-2006, 07:39 PM   #1
Skess
New Member
 
Join Date: Jan 2006
Model: 7100T
Posts: 1
Exclamation Security Breach - read this!

Please Login to Remove!

This past September, I experienced something that you all should be aware of.
Copies of every email I sent and received from my Blackberry 7100T were being sent to a stranger living in another state. These included emails with passwords to different websites, personal emails, business emails, etc.

I use TMobile as my cell company. They were USELESS!

Finally, after two weeks of dealing with the "blackberry specialists" the situation was resolved. This only happened because the woman who was receiving copies of my emails contacted one of the people I had emailed, and gave her name and telephone number.

I was very lucky she was an honest person.

After that, I was able to contact Blackberry through TMobile and tech told me that this was a "one in a million" chance of happening...but had no explanation as to why it occurred.

By the way - when I contacted TMobile and told them as reparation, I wanted my cell bill - a whopping $80 - paid for that month, I was told that they would only give me $50.

I was finally able to get the entire bill paid, but only by physically going to a corporate office.

I should have sued them.

Anyway - be aware, things are not as secure as you think they are.

Anyone else have this happen?
Offline  
Old 01-01-2006, 11:35 PM   #2
tEh_LeEt_1
Knows Where the Search Button Is
 
tEh_LeEt_1's Avatar
 
Join Date: Dec 2005
Location: Makakilo, Hawaii
Model: 8700g
Posts: 18
Default thanks for the update!

I have no idea if this has happened to me, but thanks for letting us know whats up!
__________________
PH34R MY L33T SKI112!!!!!!1
Offline  
Old 01-02-2006, 12:22 AM   #3
Concept
Talking BlackBerry Encyclopedia
 
Join Date: Jul 2005
Location: Arizona
Model: 8320
Carrier: T Mobile
Posts: 324
Default

I have to question the validity of your story. There is no way that your emails were being sent to a 3rd party address unless you BCC that address. I mean how the hell to you expect people to believe that out of nowhere blackberry linked some random email addy to your account. You must have messed up when you were setting up the account and you must have typed in the wrong BCC for your account.

I mean come on, how can we believe that you come one here with 1 whole post and say that your BB account was linked to some old lady's email out of nowhere. I gotta hear more about this whole thing before I even consider you statement true.
__________________
BB Curve
Offline  
Old 01-02-2006, 01:06 AM   #4
ScOObydoo
CrackBerry Addict
 
ScOObydoo's Avatar
 
Join Date: Aug 2004
Model: Curve
Carrier: tmo
Posts: 829
Default

I wouldn't be so quick to doubt this story; a few days ago my wifes Berry (also on T-mo) suddenly lost its own account and started getting email from someone elses Yahoo account. Emails sent from it also looked like they were coming from this persons yahoo account. I'd say something is really wrong at T-mobile...
Offline  
Old 01-02-2006, 01:28 AM   #5
Soapm
BlackBerry Extraordinaire
 
Soapm's Avatar
 
Join Date: Apr 2005
Location: The Mile Hi City
Model: 9900
OS: 7.0
Carrier: TMO
Posts: 2,794
Default

I'd say it's a good thing NTP did win the patent suite because it appears the work around is not so fool proof...
Offline  
Old 01-02-2006, 02:06 AM   #6
diesel
Thumbs Must Hurt
 
Join Date: Jul 2005
Model: 7100T
Posts: 86
Default

Quote:
Originally Posted by Soapm
I'd say it's a good thing NTP did win the patent suite because it appears the work around is not so fool proof...

huh?
__________________
PIN: 203A0340
Offline  
Old 01-02-2006, 02:33 AM   #7
paulfr2
Thumbs Must Hurt
 
paulfr2's Avatar
 
Join Date: May 2005
Location: Lees Summit, MO
Model: 8100
Carrier: TMO
Posts: 68
Default

Quote:
Originally Posted by diesel
huh?
yeah I second that huh!??
__________________
___
text [email address]
www.infini-source.com
TMO Blackberry Pearl 8100
Lee's Summit - MO
Offline  
Old 01-02-2006, 09:08 AM   #8
zChris
New Member
 
Join Date: Aug 2005
Model: 9000
Carrier: Globe Telecom
Posts: 9
Default

Quote:
Originally Posted by ScOObydoo
I wouldn't be so quick to doubt this story; a few days ago my wifes Berry (also on T-mo) suddenly lost its own account and started getting email from someone elses Yahoo account. Emails sent from it also looked like they were coming from this persons yahoo account. I'd say something is really wrong at T-mobile...
There could be a number of reasons why this happened. The most likely one would be that someone in the BB support team of your operator made a mistake in the admin page of BIS where your BB PIN was entered in the BIS profile of the person with the Yahoo account. As a result, your Handheld would then be associated with that person's BIS account and not your wife's, which is why she "lost" her own account.

On the first post as to all email on someone's Handheld being copied to another person, its pretty hard to say how something like this could happen. It is possible that the user was playing around with the filters on the Desktop Software to automatically cc or bcc all outgoing email to the 3rd person's email address or, if you are using BES, perhaps your BES Admin was playing around with the policies and made a mistake somewhere. I highly doubt (but I guess its possible) that a relay error occurred. Something like this would be extremely difficult for your operator to troubleshoot.
Offline  
Old 01-02-2006, 04:43 PM   #9
mdsnitc
New Member
 
mdsnitc's Avatar
 
Join Date: Dec 2005
Model: Pearl
Carrier: tmob
Posts: 11
Default

I assume your not on a BES? Its seems pretty much impossible for this to occur if your running a BES (end-end encryption, digital certificates, etc).
Offline  
Old 01-02-2006, 06:53 PM   #10
SmurfBerry
Thumbs Must Hurt
 
SmurfBerry's Avatar
 
Join Date: Dec 2005
Location: MD
Model: Storm
Carrier: Verizon
Posts: 158
Default

This is a freaking joke. I am in the Intelligence Community and I have heard a bunch of s@#t and this is a good one. The previous post above mine about encryption and so forth speaks for itself. it sounds like a bad case of operator error...so RTFM.
__________________
PIN Me-30512DE5
Current- Verzion Storm
Retired BB's - Nextel 7520, Nextel 7100i, AT&T Pearl, Tmobile Pearl, AT&T Curve, Verizon Curve, iPhone too.
Offline  
Old 01-02-2006, 08:30 PM   #11
kurichan
CrackBerry Addict
 
kurichan's Avatar
 
Join Date: Dec 2005
Location: San Diego
Model: 9630
OS: 5.0.0.591
Carrier: Verizon BIS / BES
Posts: 696
Default

Something very similar happened to a colleague of mine. He had a BB, cancelled the account, but about a year later, got a call from the police in a different state. One of the officers there was getting my collegue's e-mail!

No joke.

I don't remember which carrier it was, and it sounds very much like carrier error to me, but it is very disconcerting! Whatever the reason, that this can happen really hurts the security credibility of the BB.
__________________
9630 #4 < 9630 #3 < 9630 #2 < 9630 < 9530 (returned) < 8703 < 7250
Offline  
Old 01-02-2006, 08:56 PM   #12
Berry One
BlackBerry Extraordinaire
 
Join Date: Oct 2005
Model: 8220
Carrier: WiFi hotspot
Posts: 1,009
Default

Quote:
Originally Posted by kurichan
Something very similar happened to a colleague of mine. He had a BB, cancelled the account, but about a year later, got a call from the police in a different state. One of the officers there was getting my collegue's e-mail!
Every blackberry has unique email address, like [email address]. This is my guess of what may have happened:

Your colleague has name like Jim Smith and account like [email address]

He configured his other account(s) to forward emails to [email address]

He cancels blackberry account

He forgets to stop forwarding

For a year nothing did happen, as forwarded emails kept forwarded and get lost in cyberspace: account [email address] is invalid, recipient is not found.

Whatever lock RIM has on creating accounts with previously used name expired in one year, and jsmith is up to grabs.

Officer John Smith gets new blackberry and opens new blackberry account: [email address]. He can do it as [email address] is available.

Forwarded emails from Jim start to arrive to now valid [email address] which belongs to officer John Smith


Quote:
Whatever the reason, that this can happen really hurts the security credibility of the BB.
It is like someone moving to a new house but not updating everyone with new home address. Some letters will keep coming to old address.
Offline  
Old 01-02-2006, 11:26 PM   #13
dc/dc
Spam Reporter
 
dc/dc's Avatar
 
Join Date: Oct 2005
Location: IAD
Model: 6230
Carrier: Voicestream
Posts: 14,524
Default

Just goes to show that you need to be very careful with how you handle your BB and e-mail in general. BB's are not secure communication devices, unless you are in the military and have the bluetooth CAC reader; but even then, operator error can come into play.
Offline  
Old 01-03-2006, 02:19 AM   #14
Concept
Talking BlackBerry Encyclopedia
 
Join Date: Jul 2005
Location: Arizona
Model: 8320
Carrier: T Mobile
Posts: 324
Default

Like I said to begin with I'm pretty sure it was operator error. Either on his part or whoever manages his BES account. I mean how hard is to mess up if you have an email address you wanna BCC at [email address] but instead you or the system admin punches in [email address] or [email address] or any other combination of numbers and letters that fat fingers can mess up pretty easily if your not careful.
__________________
BB Curve
Offline  
Old 01-04-2006, 07:42 PM   #15
impdust
Knows Where the Search Button Is
 
Join Date: Apr 2005
Model: 8100
Carrier: T-Mobile
Posts: 35
Default Email Problem

Quote:
Originally Posted by ScOObydoo
I wouldn't be so quick to doubt this story; a few days ago my wifes Berry (also on T-mo) suddenly lost its own account and started getting email from someone elses Yahoo account. Emails sent from it also looked like they were coming from this persons yahoo account. I'd say something is really wrong at T-mobile...
This same thing happened to me just before the New Years. I stopped receiving emails and when I went to the T-Mobile web page to check my emails settings I found that all my information was gone and it had been replaced with someone elses information.

T-Mobile acted like it was no big deal at all and I told them they had a serious problem if peoples emails were being sent to the wrong blackberry's.
Offline  
Old 01-14-2006, 08:51 AM   #16
Chrisgohard
New Member
 
Join Date: Sep 2005
Location: DC
Model: 7100I
Posts: 7
Default

I remember one evening I turned my wireless off but kept the blackberry powered on. I was in the W8N room/emer room. When I went2 make a call, I turned on my wireless, and I got (either or) a text, email...from sum other person I neva heard of. I'm wit Nextel by the way. Also I don't have an easy email addy that you can mistake for another. This used to happen all the time wit sms or MMS when I had my I860. Anybody ever had that prob B4?
Offline  
Old 01-15-2006, 12:35 AM   #17
paulbblc
Retired BBF Moderator
 
paulbblc's Avatar
 
Join Date: Oct 2005
Location: Twin Cities, MN
Model: ip 3g
PIN: 8675309
Carrier: AT&T
Posts: 3,555
Default

I just got an email today that was not addressed to me. It was from a hotmail account to a yahoo account and it was some pretty personal information. Nothing too personal but still something that spammers wouldnt include in emails.

The email didn't show up on any of my gmail or company addresses but was in my BIS inbox.

Pretty wierd. I remembered this thread from awhile back so I thought I'd share. Any ideas how it would happen?
Offline  
Old 01-15-2006, 03:18 AM   #18
rmccamman
Thumbs Must Hurt
 
Join Date: Nov 2005
Location: Valley of the Sun
Model: 7100i
Posts: 52
Default

Wirelessly posted (7100i: BlackBerry7100i/4.1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/103)

It must be your phone. How could t mobile grab your mail and then send it? Hmmmm
__________________
Randy
Offline  
Old 01-15-2006, 03:29 AM   #19
Concept
Talking BlackBerry Encyclopedia
 
Join Date: Jul 2005
Location: Arizona
Model: 8320
Carrier: T Mobile
Posts: 324
Default

Quote:
Originally Posted by paulbblc
I just got an email today that was not addressed to me. It was from a hotmail account to a yahoo account and it was some pretty personal information. Nothing too personal but still something that spammers wouldnt include in emails.

The email didn't show up on any of my gmail or company addresses but was in my BIS inbox.

Pretty wierd. I remembered this thread from awhile back so I thought I'd share. Any ideas how it would happen?
how does one get an email that is not addressed to them. I just don't see how [email address] gets sent to [email address]. I just simply can't happen.
__________________
BB Curve
Offline  
Old 01-15-2006, 05:18 AM   #20
paulbblc
Retired BBF Moderator
 
paulbblc's Avatar
 
Join Date: Oct 2005
Location: Twin Cities, MN
Model: ip 3g
PIN: 8675309
Carrier: AT&T
Posts: 3,555
Default

Quote:
Originally Posted by Concept
how does one get an email that is not addressed to them. I just don't see how [email address] gets sent to [email address]. I just simply can't happen.

I really have no idea either. I was really surprised, however I did some reading and if this is the case it would explain a lot but some spammers have a way of hiding the addresses they send spam to. So although it only said to: [email address] it was likely sent out to more people.

Now the question remains how these spammers got my BIS email addy and how often am I going to receive these. Also why would a spammer send an email out refering to a scheduled church bake sale using first names and specific details. (ex. "Mary please remember to park in the back lot as the front two lots are used for guests.")
Offline  
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


Jelenko Commodore LS VPF with Pump  picture

Jelenko Commodore LS VPF with Pump

$875.00



Mitsubishi Control Board DM00N649.  SM76A127G02 . Ductless unit 47-0910KR (C64) picture

Mitsubishi Control Board DM00N649. SM76A127G02 . Ductless unit 47-0910KR (C64)

$120.00



Windsor Commodore Fastraction Carpet Cleaner CMD picture

Windsor Commodore Fastraction Carpet Cleaner CMD

$1995.00



3D MULTIMEDIA VIDEO CARD C64/V2 1MB picture

3D MULTIMEDIA VIDEO CARD C64/V2 1MB

$94.05



Vintage Printer Switch box Commodore 64/Sanyo Mountable Computer PC picture

Vintage Printer Switch box Commodore 64/Sanyo Mountable Computer PC

$49.00



1x Vintage MOS 6510CBM 6510 HMOS Commodore C64 IC picture

1x Vintage MOS 6510CBM 6510 HMOS Commodore C64 IC

$26.50







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.