Received a letter today supposedly from Adobe, with only a PO return address of PO Box 483 Chanhassen, MN 55317.
Tated "On behalf of Adobe Systems, I am writing to inform you about an incident that involved information about you. We recently discovered that, between September 11 and September 17, an unauthorized third party illegally accessed certain customer order information...." goes on to say that the "third party likely removed....customer names, encrypted payment card numbers....." and "we have arranged for you to enroll in a complimentary one-year credit monitoring membership. We have engaged Experian to provide you with its ProtectMyID ALert membership" then gives an activation code and a url oro phone number. The letter is dated October 11 2013 and signed Brad Arkin, Chief Security Officer.
I entered the address and it is not Adobe's, but is linked with several sites that do not offer contact info beyond the PO Box address without my entering my personal info.
This is obviously an attempt to trick people into offering personal and credit info.
Laura
Escondido,#2Author of original report
Tue, October 22, 2013
Dear Mr. Wiebke Lips,
I appreciate your attempt to set the record straight. I am becoming convinced that Adobe did indeed authorize the letter, contacting with Experian to offer a free one year trial to compensate for a security breach. However, I disagree that the format of your letter is "common practice". In my experience, multi million dollar corporations do not sign their business correspondence Brad Akin, title, with no company name or address or phone number. They also do not have another company mail said letter in an envelope that carries no identification other than a PO Box address on the envelope. I understand that companies make mistakes but, as you well know, how those mistakes are handled is how a company is remembered. In this case, I feel you erred in sending out your remedial communication in an unprofessional manner. Sincerely, Laura Rader
Wiebke Lips, Sr Mgr, Corporate Communications, Adobe
San Jose,#3UPDATE Employee
Tue, October 22, 2013
Dear Laura,
The letter was written and signed by Adobe, and we contracted with a third-party vendor, in this case Experian, for the mailing of and returns for the letters, as well as to offer the optional credit monitoring membership. This is common practice. Please know that we deeply regret that this incident occurred. We value the trust of our customers and are working aggressively to prevent these types of events from occurring in the future.
Best regards,
Wiebke Lips
Senior Manager, Corporate Communications
Adobe
Laura
Escondido,#4Author of original report
Tue, October 22, 2013
If, in fact, this is a legitimate company hired by Adobe to rectify a security breach, why is the addressee, in very small print, Experian, the same company I am being referred to for security repair? Solicitation much? Why is the PO Box address used in the letter sent "on behalf of Adobe", when "googled" also used by MANY different companies? Why is there no contact info such as a street address, email address, website or phone for either Adobe or the supposed "damage control" company? If Adobe can take the time to read Rip Off Reports and file rebuttals, they could certainly take the time to reach out to their injured customers THEMSELVES, rather than hire a ghost agency with no legitimate identity! If I'm being told I've already been conned, do you really think I'm going to reply to a communication that screams PHISHING attempt? Really?
Laura Rader
Wiebke Lips, Sr Mgr, Corporate Communications, Adobe
San Jose,#5UPDATE Employee
Mon, October 21, 2013
Please note that the “PO Box 483, Chanhassen, MN 55317, USA” return address is the legitimate return address on the customer notification letters sent by Adobe for the incident announced on October 3. This PO Box address is owned and managed by the vendor handling the mailing of and returns for these letters on behalf of Adobe.