ComplaintsforRubber Stamp Champ

• Initial Complaint

  02/13/2024

  Complaint Type:

  Order Issues

  Status:

  Resolved

  More info

  I order a rubber stamp and I was not satisfied because it was done wrong, I requested a full refund and they agreed, but they refund to an account I close because my card was compromised, however the refund never was posted to my account because it was closed, I contacted them and provided my updated debit card with the same bank, I still have not received the refund of $64.65 they had plenty time to know the bank didn't take the refund and it was returned. After I contacted this business they said someone else had to send the refund, I provided all updated debit card and nothing has been refunded. I should not be continue to wait because they can refund immediately.

• Initial Complaint

  12/09/2022

  Complaint Type:

  Billing Issues

  Status:

  Answered

  More info

  Rubber Stamp Champ advertises that their internet web-site is safe, and there is a seal denoting this above the BBB logo, which reads, "IT'S SAFE TO SHOP WITH US!", but this website is currently vulnerable to attack, and was the victim of at least two attacks dating from 2015 and February of 2020, while they have exposed the bank account information, credit card information, and social security information of over 20,000 people through bad design of website, and there is currently a zero-day flaw that allows any person to view the credit card information of customers without authentication needed. In addition to being the victim of attacks and having vulnerable software, this company has violated each state's laws regarding the disclosure of data breaches, and willfully hid and currently hides that their customers' private and confidential information has been exposed. I worked with law enforcement and the software provider that detailed and reported the attacks, but Rubber Stamp Champ must also notify the 1 million customers affected, or likely affected, by the breaches. The claim that "IT'S SAFE TO SHOP WITH US!" should be removed, and they should follow each state law regarding the timely notification of each customer about each of the four breaches, two of which are ongoing and unpatched. I am the former business partner and ex-employee of the software company responsible for the breaches with detailed information about how their website was designed, what mitigation steps were taken, Rubber Stamp Champ's awareness of the problem, and its unpatched flaws. Attached are some data from the United States military who is a customer of Rubber Stamp Champ which is currently exposed. In the same way that these stamps show personal information of military, others show SSNs, credit card numbers, and bank account numbers.

  

  Business response

  12/15/2022

  See Attached 

  

  Business response

  12/15/2022

  See Attached 

  Customer response

  12/15/2022

   I do not accept the response as this business has denied any wrongdoing, despite law enforcement detailing the first hack of their website in 2015; their only response to the claim has been to "shoot the messenger" and falsely claim that the messenger has ulterior motives.  I personally worked with officers from Department of Homeland Security/United States Secret Service and the Boston Police in this matter, and I personally helped the officers gather the information needed from their servers in order to track the foreign actors responsible for the attack.  In 2015, Rubber Stamp Champ did not report the data breach affecting more than 500 of its customers to the California Attorney General as required by law, nor have they submitted the information about the data breach and a copy of the email sent to affected customers to the appropriate website according to California law.  They have likewise violated each state's laws regarding the procedure for notifying affected customers of the four data breaches.  I suspect that very soon this company will be attacked for a fifth time, and will not be able to recover financially due to their inaction at this time.  I am working with the FBI in trying to save the tens of thousands of government employees from having their personal and financial information stolen due to the unsafe practices of Rubber Stamp Champ.

  
  

  While it is true, Rubber Stamp Champ is being sued in federal court for other civil violations, my only concern at this time is the safety of the public.  Rubber Stamp Champ must remove the claim that their website is safe; if they continue to use a vulnerable website to sell products online, they would be guilty of gross negligence when they are hit with a devastating fifth attack.

  

  Business response

  01/23/2023

  Re: Rubber Stamp Champ / ******* *****: Complaint No. ********

  Dear *** ******* 

  As I have previously written, this firm serves as litigation counsel to Rubber Stamp  Champ. I am in receipt of your email dated January 17, 2023, to ******* ****** of Rubber  Stamp Champ forwarding a rebuttal statement submitted by ******* *****. Mr. *****’s  rebuttal simply rehashes his prior defamatory assertions, and Rubber Stamp Champ respectfully  requests that the BBB refrain from posting any portion of Mr. *****’s complaint online.  

  As I previously wrote, last year, Mr. ***** filed a lawsuit pro se (i.e., he is representing  himself in the action) against Rubber Stamp Champ, several individuals, and several other  companies (including Google). The case is pending in the District of Massachusetts, and is titled  ***** v. ********** ************* ***** ***** ****** *** ******************  

  Mr. *****’s latest missive is part and parcel of his campaign of online harassment of the  defendants, including: posting false, defamatory, and disparaging claims about the defendants on  the internet; posting personal information about the defendants online; and threatening to take  further action to harm the defendants, including making unauthorized charges to their customers’  credit cards. As a consequence of Mr. *****’s harassment, the Massachusetts federal court  entered an order barring further harassment by Mr. *****. Mr. ***** subsequently violated that  court order by releasing one defendant’s source code on his website and then invited hackers  throughout the world to hack all of the sites that company hosts in order to access and make  fraudulent purchases with the credit card information of the company’s customers. Accordingly,  the court is considering entering sanctions against Mr. ***** and imposing another anti harassment order against him.  

  Contrary to Mr. *****’s false contention that his “only concern at this time is the safety  of the public,” his ongoing harassment campaign is a malicious effort to harm my client, and I  request that the Better Business Bureau refrain from providing Mr. ***** a platform to defame  Rubber Stamp Champ.  

  I am happy to discuss this matter with you if you have any questions.  

  This correspondence is not a waiver of any rights that Rubber Stamp Champ may have,  all of which are expressly reserved. 

  
  

*Some consumers may elect to not publish the details of their complaints, some complaints may not meet BBB's standards for publication, or BBB may display a portion of complaints when a high volume is received for a particular business. ↩