My account got hacked

I put in my membership record number and It says this account does not exist. and I can not acsses my patriatical blessing or any other information.

SpencerField wrote: Sun Mar 13, 2022 9:48 pm I put in my membership record number and It says this account does not exist. and I can not acsses my patriatical blessing or any other information.

Unless there is more evidence that your account really did get hacked, I don't see that as too terribly likely.

Does it say the _account_ does not exist? Or, does it say the _MRN_ does not exist? The difference is significant.

The SpencerField account is proven to exist by your logging in and posting. Because you very recently joined the Forum, it's possible that you recently created your Church Account. If that is the case, there _might_ be a delay of a day or two before some operations can be done.

If it's your MRN that is said to not exist, please check with your ward clerk to make sure you have the correct MRN. At least in olden days when the MRN was hand-written onto a temple recommend, it was possible for an error to be made in transcription. Depending on where/how you got your MRN, that might still be possible. If your ward clerk cannot resolve the issue, he can connect you with the GSD, and they can fix anything that can be fixed.

rmrichesjr wrote: Sun Mar 13, 2022 9:56 pmThe SpencerField account is proven to exist by your logging in and posting.

The account shows as a member account also. That means the MRN is registered in the account profile.

Seems the church IT system WAS hacked in March 2022.

https://gephardtdaily.com/local/lds-chu ... ssociates/

ch15154 wrote: Thu Oct 13, 2022 5:48 pm Seems the church IT system WAS hacked in March 2022.

https://gephardtdaily.com/local/lds-chu ... ssociates/

Nothing that I can find on the church web page yet, but this is from the Deseret News:

https://www.deseret.com/faith/2022/10/1 ... at-we-know

Go to this website to find out if your person data was compromised.

a.churchofjesuschrist.org

ch15154 wrote: Thu Oct 13, 2022 10:07 pm Go to this website to find out if your person data was compromised.

a.churchofjesuschrist.org

While that's a church website, I'm not fond of the fact it switches over to TrustArc.com and wants me to supply my DOB. I know the church has that information, but I don't feel like starting a relationship with another company I've never heard of just to find out if I've been a victim of the church's data breach.

garystroble wrote: Thu Oct 13, 2022 9:53 pm

ch15154 wrote: Thu Oct 13, 2022 5:48 pm Seems the church IT system WAS hacked in March 2022.

https://gephardtdaily.com/local/lds-chu ... ssociates/

Nothing that I can find on the church web page yet, but this is from the Deseret News:

https://www.deseret.com/faith/2022/10/1 ... at-we-know

The newsroom link is https://newsroom.churchofjesuschrist.or ... a-incident

I also got an email about it.

I’m assuming that TrustArc is a third party computer security company the Church is working with regarding the data intrusion.

https://trustarc.com/

ch15154 wrote: Fri Oct 14, 2022 5:07 am I’m assuming that TrustArc is a third party computer security company the Church is working with regarding the data intrusion.

I'm sure it is, but it still bothers me on principle. I can't find out the status of the breach without giving sensitive information to yet another party.

russellhltn wrote: Fri Oct 14, 2022 11:45 am I'm sure it is, but it still bothers me on principle. I can't find out the status of the breach without giving sensitive information to yet another party.

Ditto. As I just read the email message that appeared to say my data _was_ leaked, I think I'll avoid the third-party page.

russellhltn wrote: Fri Oct 14, 2022 11:45 am

ch15154 wrote: Fri Oct 14, 2022 5:07 am I’m assuming that TrustArc is a third party computer security company the Church is working with regarding the data intrusion.

I'm sure it is, but it still bothers me on principle. I can't find out the status of the breach without giving sensitive information to yet another party.

You could always call the phone number. From the Newsroom statement it seems they hacked the Church Account system and got the information that was entered there. I wonder how they decided who actually got hacked. I did not get an email.

lajackson wrote: Fri Oct 14, 2022 9:26 pm ... I did not get an email.

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

rmrichesjr wrote: Fri Oct 14, 2022 9:34 pm

lajackson wrote: Fri Oct 14, 2022 9:26 pm ... I did not get an email.

In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

Just think of us who won't get the email to go to Missouri when the time comes too . . .

garystroble wrote: Fri Oct 14, 2022 9:38 pm Just think of us who won't get the email to go to Missouri when the time comes too . . .

Let's hope this forum is still up and working at that time and that the first person who DOES receive the message posts about it here.

lajackson wrote: Fri Oct 14, 2022 9:26 pm From the Newsroom statement it seems they hacked the Church Account system and got the information that was entered there. I wonder how they decided who actually got hacked.

I assume they follow the logs. It may be more detailed then we think. They may have auditing in place to catch employees looking up stuff they shouldn't.

lajackson wrote: Fri Oct 14, 2022 9:26 pm I did not get an email.

Nor did I.

rmrichesjr wrote: Fri Oct 14, 2022 9:34 pm In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

Humor noted, but I do get my Ward's weekly email...

rmrichesjr wrote: Fri Oct 14, 2022 9:34 pm In the interest of trying to find a little humor in a possible collision of two tech issues, I wonder if those email messages are being sent out via the Send-a-Message facility.

I still get those. I think . . .

russellhltn wrote: Fri Oct 14, 2022 10:16 pm They may have auditing in place to catch employees looking up stuff they shouldn't.

I doubt that an employee was the cause of this breach. But I do know there is auditing in place and that it works.
(Don't ask, but it was not me. I was merely assigned to interview a member of interest.)

lajackson wrote: Sat Oct 15, 2022 11:05 am I doubt that an employee was the cause of this breach.

I didn't mean to imply anything like that, just one of the reasons why it was there. I've had to dig deeper into SQL than I've wanted to go. If you throw all the right switches, it will record every query made. I think the church is a Oracle shop (or at least was), but I'd expect Oracle to have the same. With logging at that level, it wouldn't be too hard to figure out what was retrieved.

russellhltn wrote: Fri Oct 14, 2022 10:16 pm

lajackson wrote: Fri Oct 14, 2022 9:26 pm I did not get an email.

Nor did I.

It turns out we both got the email - but gmail filed it in the spam folder.

russellhltn wrote: Sun Oct 16, 2022 5:30 pm It turns out we both got the email - but gmail filed it in the spam folder.

Am I the only one who has received multiple such messages to the exact same email address?

I received one a few days ago but just noticed it yesterday in my spam folder so marked it "not spam" in Gmail. I received another identical one this morning.

I got one today and the 14th.

I was wondering why I never got the email – it turns out it was in the spam folder for me as well (Gmail).

I do generally get Send a Message emails (noreply-lcr@churchofjesuschrist.org) and Church communication emails (Communication@message.ChurchofJesusChrist.org) in my inbox. This one that went into spam was from info@e.churchofjesuschrist.org, and must have gone through a different system.

I got the first email, but not the second one. Frustratingly, the phone number given for Australians to call to get info uses British Time, and so doesn't open until the evening East Australia time, so I'm still yet to call.
Has anyone called the number and can describe what the process is like (i.e. who is at the other end, what do they ask, what do they give you)?