Page 1 of 1

White Palm Data Leak

Posted: Thu Oct 11, 2018 3:49 pm
by sasquatch_jr
Just a PSA that White Palm has either sold customer information or been hacked. See emails:
Hello,
I got an email today saying that I had a Flex Delivery parcel ready for pickup, even though I was not expecting anything. When I got to the post office, it turned out to be junk mail from "Established Underground".
The particular post office that this was sent to has only been used by me twice, both times for orders from White Palm. This means there is no other way these people could have gotten that address unless they got it from you.
Do you have an explanation for how someone got ahold of an address that only you know?
(https://www.reddit.com/r/CanadianMOMs/c ... omer_info/)
Thanks
And the reply from Dean:
Thanks for contacting me man. I honestly have zero clue. I received an envelope from them too. Same with Ash.
We've both ordered from Herbal Dispatch and Potcargo in the past. If that helps. When we were first starting WhitePalm we ordered from them both to compare quality, etc. Always good to know what the competition is up to.
As I see it there are two explanations for this junk mail: White Palm sold their customer information, or White Palm got hacked and does not realize it. I followed up with an email telling them that they should change their administrative passwords and install software updates. Have not heard back.

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 1:16 am
by rick_lap
Today, I also received the junk mail. I've ordered from White Palm 3 times in the past. I'm pretty angry right now

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 5:16 am
by doejohn2043
Who is responsible for updates to the MOM list?
I read comments on the forum and keep written notes on which MOMs to avoid... But is that not the point of the list?

Thank you.

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 7:23 am
by xsinx
doejohn2043 wrote: Tue Oct 16, 2018 5:16 am Who is responsible for updates to the MOM list?
I read comments on the forum and keep written notes on which MOMs to avoid... But is that not the point of the list?

Thank you.
Admins are, send them a PM. They aren't always very active and don't keep tabs on everything that's happening. I'll send them a msg about this on discord.

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 7:47 am
by xsinx
Update: Getwhitepalm have been moved to the "community issues" part of the MOM list. We advise caution with this MOM given the apparent data leak.

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 2:35 pm
by Konker
I ordered from White Palm ONCE because they had a rare landrace sativa and I got one of those mailers yesterday. I'd be pissed enough if they sold my info, but if they got hacked that's definitely worse.

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 2:54 pm
by xsinx
According to them they neither sent those packages, nor sold the info... So either they are lying, or they got hacked. In any case, I would avoid until it's cleared up (if it ever is).

Re: White Palm Data Leak

Posted: Tue Oct 16, 2018 9:13 pm
by bblzd
I spoke to someone who received the same junk mail but never ordered from GWP before. However that only tells me the info might have been purchased from multiple sources. They suspected Lift expo.