Dear Panda Cashback user,

First, I want to start with my sincere apology regarding the issues that some of you may have encountered over the last few months. As many of you know, we have had some delay in confirming cashback or even issuing payments.

I would like to assure everyone, any and every legit cashback transaction earned will proceed will be issued.

Now, I like to share with you the struggle that our team in Panda Cash Back have been trying to address.

What Happened ?

A hacker was able to access one of our Partners API ( the way we communicate with the partners companies to report cash back automatically ), and generated confirmed fake Transactions in our site, in addition, he manipulated the value of many transactions to report a higher amount for some retailers to cover his track. The hacker has generated hundreds of thousands of fake transactions. He also went a step further to offer people online to generate for them fake cashback transactions on Panda CashBack in exchange for a price. Unfortunately, some of our users , including VIP members, have abused our service by purchasing fake transaction to get cashback that they haven’t earn.

How did this affected our service ?

This mess has caused various issues at our end, higher number of withdraw hit our end, and the amount of transactions made it harder for our team to verify the transactions on time. Our team have been handling issues manually causing the process to take way longer than it should to prevent the fake transactions from going through.

How did this affect me ?

Our team is currently reviewing each and every transactions that have been confirmed over this period , manual auditing is taking place to filter scammers. Due to that please bare with us some of the delay in processing payment and cashback.

Where the hacker stopped ?

Yes, one of the main reason we couldn’t announce this earlier, is for our investigation to be completed without alerting the hacker. The hacker was identified. Our security team has secured the connection and more manual events are taking place.

What happens now ?

The following are actions handled by our team :

• Pending cashback will be processed ASAP, you may notice that cashback will be changed to reflect the real amount of the cashback not the inflated value.
• Payments will be processed as soon as possible
• Users who abused our service to gain fake cashback, their accounts will be suspended and their account will be turned to our legal department.
• If your referred either the hacker or one of the people who purchased his service expect these values to be reflected on their transactions (as well as referral cashback from these accounts). As they will be declined.

Where my information exposed ?

No, the hacker didn’t hack our site, the offense took place on the reporting mechanism, all of our users data are safe.

Can I continue used Panda CashBack to shop with no issues at this time?

Yes, you can definitely can, the hijack by the attacked didn’t effect our cashback process and any purchase you make, you will earn cash back on.

How Panda CashBack will ensure this not happen in the future ? 

Our security team has made changes on our reporting APIs to ensure that only transactions generated on the original server are accepted to be posted in our database.

I again would like to apologize for this inconvenience caused by this attack. Panda CashBack is committed to provide its users around the world class service, and we will ensure it is back on track. We thanks all of our users around the world for their patience, and for always trusting Panda Cash Back. We have been in business for over 5 years thanks to you and we will ensure that our service is back better than ever by the time this issue is addressed.

I admit that our team wasn’t prepared for handling this type of emergency which caused our users to suffer of delays in response, and address their concerns, and for that I report that we have replaced the head of our customer service department, along with the head of the finance department with new leaders who will ensure better service.

A follow up email by our media team will provide further details on those new leaders.

Thank you

The post Message from our CEO appeared first on Panda Cash Back.