A number of our forum members have reported going to shop using their PC Plus cards and noticing that their points have been used. A quick search will show that this is happening across the country and is a big enough issue that the PC Plus website now has a message about passwords and has added recaptcha to their login page.
From the cases I have seen mentioned with enough details, the thieves seem to be adding an electronic card to your online account. It is a good idea to log in to PC Plus and check for unusual cards and set yours to Earn Only and change your password to protect your PC Plus balance. To do this, head to the card maintenance page here. Give your cards a name that you will recognize as yours. While new cards are being added in these cases, it is a good idea to set them to Earn Only in case you ever lose your card, then change when you want to redeem.
PC Plus is also recommending that you check your passwords. Do not use the same password for multiple sites, if one gets compromised they could use the password on another site. They recommend (as is common sense and recommended by most sites) that you keep them unique, private, change them often and not easy to guess.
See the discussion about this and general PC Plus chatter here.
Thank you so much for alerting us!
Mine’s been hacked, despite a complicated password.
I deleted the 3 suspicious cards and have added a password so complicated I doubt I will even be able to remember it.
If you get cards from store, they all have a different numbers even the ones for your keys..we give out cards that have 3 in package, all 3 are linked but have different numbers
My points were taken on 19 December, PC gave me them back a few days later. Be careful because I got an email yesterday asking me to open an attached zip file (the email contained my PC Plus login and password as well as an access code for the attachment) … I was told it was an invoice that needed my attention. I know this email is linked to my PC Plus being hacked because it was the only place I used the password they provided. Suffice to say that I didn’t open the attachment … I forwarded the email (minus the attachment) to PC Plus.
This link IS the scam. Do not click it and put your information in. Go directly to President’s Choice Financial website then click on pc points. Never click a link of any kind in an email then put in your information. Always go direct.
It is just a direct link to the manage cards page, but always a good idea to ensure you log in direct from the main page
How are you removing old cards as my only options are “Add Card” , “Save Changes”, “Cancel” or to change the nickname on the cards.? No “Delete” appears anywhere.
As shown in the image above, there is a red delete link beside the card number. If managing from the app, there is an X beside the card to delete
I just looked at my account on a mobile device, the only card I could change was my joefresh ecommerce card, the others had no option to delete or change in any way. Just as Charles described. The others are PC Financial cards, maybe that’s the difference?
Thanks for the heads up on this!
Yes, I imagine the options are different for PC financial but you have bigger issues than just your points if your bank cards go missing and in fairness are more likely to think to cancel them.
Just check for new PC plus cards you do not recognize in that case
If Loblaw really cared about security, they wouldn’t limit your PC Plus password to only 8 characters.
We may see that change with their recent messages about passwords, but agreed, I was surprised to see mine was too long when changing it recently
I had 510,000 points stolen and used on Boxing Day. I live in Alberta and they were used in Ottawa. They knew exactly how many points I had and made a purchase for $519 using all my points. I never had a PC plus card only our credit cards were linked. When I checked my account there was a PC plus card added to my account. When speaking to the securities dept. I did mention that it was difficult to create uber secure passwords when they limit you to 8 characters and also why wasn’t I notified when a PC plus card was added to my account to confirm that it was me who did it. Points were returned but it was a pain and caused some worry.
Oh wow, that is more than I have seen others post about losing (although everyone so far has got points back)
I had been saving them for when I was really in need.
I’ve been a loyal Fortino’s customer and of course a PC points accumulator. Currently I do not have access to my card and have sent several emails stating that my card has been hacked. I have tried calling but due to the long wait time hung up. I received a response from them and admittedly I wasn’t very happy with
the response. This is what was sent verbatim:
Thank you for contacting PC Plus Member Services.
We have received your inquiry. We can confirm that the email address that you have used to contact us is not registered to any PC Plus account. For security purposes and to access your PC Plus account, please contact us from the email address that you used to enroll in the PC Plus program.
Please do not hesitate to contact us with any further inquiries.
Thank you for participating in the PC Plus program!
Regards,
It’s been going on now for 4 days and counting with no relief thus far. I’m extremely concerned due to the fact that I’ve been accumulating points for over 2 years. I sure as hell hope they can resolve and prevent this from happening again. If not I’m going to go shopping elsewhere.
Did you get your points back yet? I was hit up this past week for $260. Called PC Plus, they said they would investigate. I’m still waiting for them to get back to me.
Any news? Advice? I had 400 000 pts stolen. ..called on Saturday. Under investigation.
Everyone I have seen mention it so far got their points back after a week or so as long as they could prove it was a new card and not them
I got my points back, the rep asked me to uninstall app and change my password and security question. Once I did that my points were returned. I uninstalled it and won’t install it again as hackers can get the bar coded number off the app.
PC is saying this is due to weak passwords, but I think the problem is deeper as card numbers are not masked on the site.
If you don’t get an answer, email them at [email protected], that’s how I got my case moving.
any news?
Had Pc Plus call me and tell me that my card had been hacked. asked me to uninstall app change password and security question. and have told me that they would return my points.