Ebenefit account hacked March 2019

[Rreydan Soriano]

My Ebenefits account just got hacked and I I didnt receive my check on March 1,, 2019, My check gor rerouted too a fraudelent account.  Somebody got into my ebenefit account and change my direct deposit information,How long will it take the VA to put my check back into my account?

[Trudy]

My ebenefits account was hacked  this month (July 2019). I logged on and was prompted to change password, did what I had to do and logged off. Little while later noticed an email from the VA but I was busy and unfortunately I didn’t pay close attention. Thinking back I think I assumed it was an email confirmation that I changed passwords. However, 3 days later I am deleting emails and I see the VA email saying my direct deposit had been updated. Knowing I had not done this I went to log into my account and my password had been changed along with  my challenge questions. So who ever got into my account did so directly after I changed my password that day. Coincidence? I don’t know but it’s weird. When I finally got access to my account my direct deposit had been deleted for both my disability and gi bill.I called the VA to report it and I honestly thought I caught it in time because it was the 23rd, but I was told the cut off was the 20th and it had been changed on the 19th. So the check was set in stone to go to the fraudulent account. The rep filed a report and told me to call back on the 1st when I didn’t get my funds. She told me until I actually didn’t get the check is when it becomes a theft. She also told me that 99% percent of the time when an account is hacked it happens the day before the checks are set up to go out. So if the veteran catches it, it is still to late to do anything about it. She explained that they set the deposits up each month on different days, it’s never the same day each month, but she said it’s like they have the info on what day is the cut off to change checking accounts. Well it really sucks this happened and for all those saying you should have a better password, well my password was not an easy one to guess and all my challenge questions were made up answers. For example what was your 1st job? I literally put a strip club lmbo... Anyways best of luck to anyone reading this and had your money stolen, especially if you depend on it for your bills.  One more thing you also need to consider going online to the 3 major credit reporting agencies and putting a freeze on your credit, and place a fraud alert. Change your email, bank account, telephone number because they got more than your money, they had access to your whole life and unfortunately depending what all they looked at they had access to your medical records and your listed dependents were exposed. The link below will direct you on how to put a freeze on your credit and it’s easy so I would definitely do it.  

https://www.consumer.ftc.gov/blog/2018/09/free-credit-freezes-are-here

[broncovet]

Trudy, it sounds like your computer is infected with a "key logger".  

Here is how this sometimes happens.  Allowing a key logger is rather easy and is a nightmare come true.  

You either go to a "bad" website and accept cookies, or, you download "free" software, such as little smiley faces or something that sounds cool.   The are 3 types of websites which are very bad and often have key loggers:  Porn, games, casino type websites.  Dont go to these type of websites as you risk being hacked.   

Whoops, you just downloaded a "key logger".  

This logs every key you type and sends it to the hacker.  This includes passwords.  You changed your password, and maybe even security key phrases, and sent those to the hacker because he knows every key you typed.  Thats why its called a key logger.  

Here is the only "for sure" way I know to get rid of key loggers.

"Wipe" your entire operating system and download a fresh one, from CD.  This means you will lose every picture and every thing you have on your computer.    If you download the one on your hard drive that windows keeps as a system restore, you could be downloading the key logger again.  (unlikely, but those hackers are getting smarter). 

The new operating system will perform better and your key logger will be gone.   

Many IT professionals recommend reloading a "fresh" operating system about once a year, anyway.  Yes, its a pain. 

Or, as I explained, get a free Linux operating system (if you order the CD, they may charge you 5 or 10 dollars), but you can download it and burn your own cd with the Operating system on it and never have to worry about it.  

Security of Operating systems is compared, here:

https://www.dailydot.com/debug/most-secure-operating-system/

Windows did not make the top 10.  

An alternative, if you dont want to learn Linux, is to buy a chromebook.    Linux Mint, for example is very user friendly and many people I let "borrow" my computer (family members) dont even know its not windows.  It looks and acts the same, except they cannot use my computer UNLESS I first type in my password.  

The OS "Chrome" made by Google is very good.   

I would suggest, if you go the chrome route, to login to your bank, ebenefits, and other very important websites ONLY on your chromebook.  This way you wont give away your ebenefits password to a keylogger.   

 

Edited July 26, 2019 by broncovet

[GeekySquid]

On 3/5/2019 at 4:59 AM, Rreydan Soriano said:

My Ebenefits account just got hacked and I I didnt receive my check on March 1,, 2019, My check gor rerouted too a fraudelent account.  Somebody got into my ebenefit account and change my direct deposit information,How long will it take the VA to put my check back into my account?

Have you lit your hair on fire yet? from all the posted responses that would be a reasonable expectation.

first and foremost your VA account did not get hacked..... YOU got hacked. either someone you know or a machine you use has been the target of the hack. They used that machine or personal info they knew and attacked your account.

The VA servers, DS Login, ID.ME API, etc are all in fine fettle.

You have multiple steps to take in different spheres.

machine steps:

1) if you are not technically savvy. disconnect all your devices and run to best buy and pay then to disinfect all your machines, reformat and dig out root kits...tell them that root kits.

2) If you are technically savvy then reconsider calling yourself that; getting hacked like this means your savvy is sagging.

va steps:

1) Call peggy inform them of the breach. tell them to report it. Tell them you need help getting  the phone number to the DS Logon Team.

2) Call DS Logon team report hack. Have them transfer you to Ebennies support, VA.Gov Support, and My Healthy Vet support to report hack and reset all passwords. .You will lose 16 hours of your life making these calls, waiting on hold and trying to convince them you are you.

3) From a Clean Computer find the number to Treasury. Report the Hack.

4) Report to FTC, VA, Local Police, FBI and all your freaking banks!!!!

personal banking steps:

1) Go to main bank w/ police report in hand if possible (go first if you want you will still have to get the police report.)

2) contact all credit cards. have them reissue those numbers. Same with Checking Accounts, Money Market accounts and all retirements accounts IRA SEP etc.

3) Contact Experian, Equifax, or TransUnion and place a credit freeze on your accounts.

4) Contact Innovis. they are the 4th big credit bureau that nobody remembers.

5) contact your phone carriers. report the identity theft. change passwords

6) There is a new agency database to report ID theft too. It is supposed to be checked by landlords and Telephone Companies and Cable Companies.

7) Report the theft to your CAble company.

8 ) any bill like Water, sewer, electric you pay on line, CALL THEM. Change Account username and password. Give them a code phrase for anyone asking to access your account. do this for all your accounts, everywhere.

9) on all accounts establish 2 factor identification BUT only do that once your cell phone has been completely wiped and reformatted. Better yet smash the old one and get a new physical cell phone.

10) if you are a TMO customer get a DIGITS line and use that new line for all your accounts and banks etc. DON"T USE IT FOR ANYTHING ELSE and don't give it to people etc. Your phone number is an easy ploy for a grifter to use on a bank telephone CSR to get past the first layer of security. The banks systems only read your Caller ID not your actual Device ID's. A grifter who spoofs your number will look like YOU ARE CALLING and bypass tons of security features.

Bad news for you. this is just the short list of things you have to do.

 

[paulstrgn]

After reading this post I decided to be proactive and change my password. I try to make all my important accounts with a more complex password (not the same ones) and less important ones such as here with one I can easily remember. 

I hope everyone here uses a good antivirus protection program and never ever click on those links from people you don't know.

Also remember unless you actually do have a filthy rich relative living in a strange country it is highly unlikely they left you millions of dollars. Or that you won that lottery you never entered into. 

If it sounds to good to be true then it is.

I wish those who had their passwords compromised a speedy resolution to resolving your lost funds.