UPDATE November 3rd, 2022 > jö Bonus Club – transactions possible again, but you should reset your password immediately!

After members of the jö Bonus Club were victims of cybercriminals a few days ago, all transactions are now possible again.

As is well known, cyber fraudsters have attempted to log into customer accounts of jö Bonus Club members using email addresses and passwords that they had stolen from other sources. For security reasons, the jö Bonus Club has reset passwords. The affected members will be asked to enter a new password when they log in. In addition, all jö customers are once again urged to enter a new password for their jö account that has not yet been used anywhere and generally not to use a password on multiple online platforms.

As is known, the cyber fraudsters attempted to log into jö Bonus Club customer accounts using 2.3 million email addresses and passwords that they had stolen from other sources.

As is now fairly certain, they were successful in 18,000 cases (out of 4.3 million jo customers). In these cases, the jö customers had used a combination of email address and password for their jö account, which they also used on other online platforms. The cyber attack was discovered by the jö Bonus Club itself. As part of constant monitoring, the IT experts at the jö Bonus Club registered unusual login attempts and immediately took countermeasures. In 75 cases, the cybercriminals made purchases from jö partner companies using stolen “Ös”.

The total damage is around 4,000 euros. The jö Bonus Club will replace these stolen “Ös” for its customers as a gesture of goodwill. In no case did the cyber thieves have access to sensitive data. (Source)

What is the “jö Bonus Club”? The jö Bonus Club (often shorter jö Club ) is an Austrian customer loyalty program . It was started in 2019 by REWE and OMV with other partners. For every purchase, participants receive so-called “Ös”, which can be converted into rewards or donated. In addition to the points system, there are other benefits and discounts.

There are currently 15 known cases in which bonus points were misused. According to the current status, the damage totals a few hundred euros. From today's perspective, there is also suspicion that the fraudsters tried to log into around 12,000 customer accounts (out of more than 4.3 million accounts). The reason: These jö customers had apparently entered a password for their jö account that they also use elsewhere and that was stolen there.

The jö Bonus Club has therefore stopped all online transactions for the time being as a precautionary measure for all customers.

This affects all jö partner companies that operate an online shop where jö bonus points could be redeemed. In detail: Until further notice, no jö bonus points can be collected online and no jö promotions can be redeemed in the online shops of jö partners. Use in the branches of jö partner companies is not affected.

The authorities were immediately informed. All jö customers and partners were also informed.

The IT and security experts at jö Bonus Club are working hard to fully clarify the matter and prevent further damage to protect customers. It is not yet clear when online transactions will be fully possible again.

source

APA / OTS / Milestones in Communication
Wikipedia:

Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )