Dear all,

Pacnames sent a sensitive password by email to a domain that I no longer own, effectively risking giving control of my domains to a third party and harming my business..

The password would give a third party the ability to take control over my hosting.
The issue arose because Pacnames did not give any consideration to the fact that I am not the owner of that domain anymore - this is a very serious security risk as far as I am concerned.

I had never had any business with Pacnames until DSVR handed off my details to them without me being notified. Pacnames now want me to provide them with copies of id and other details and I am reluctant because Pacnames has already proved to be very careless with personal information, furthermore, they have my credit card details and other proof of ID because I had to 'pay up' to get use back of a domain before they would talk to me recently before all this happened.

Now they are ignoring me, having 'hijacked' a domain name that is critical to my business and on a server which is planned to be shut down by DSVR who are holding it open as a gesture of goodwill I guess.

I feel like I am being held to ransome by a bunch of cowboys also because whenever I sent a mail I get the message back that I have copied in for your information below. Note that the xx@yy.com was changed by me for this message.

I know they are receiving the mails but it doesn't seem very professional of them to blast me with message delivery failures which have recently started happening (I can read the SQL to see why).

Primarily I would like to report the company to the authorities for misdelivering a critical password and wondered if some advice can be given by yourselves.

Many thanks

Kevin


----------------------------------- message received below ------------------------

This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
pipe to | /home/pn2/public_html/support-internetnameregister-com/cli/index.php
generated by support@PacNames.com
The following text was generated during the delivery attempt:
------ pipe to | /home/pn2/public_html/support-internetnameregister-com/cli/index.php
generated by support@PacNames.com ------
Invalid SQL: INSERT INTO `swticketemails` (`email`) VALUES ('xxxl@yyy.com'); (Duplicate entry 'xxx@yyy.com' for key 2)

<snip>

New to this forum, I'm just flicking through a few postings - all very interesting I must admit. This one caught my eye as I've been looking into hosting and checking up on a variety of companies - PACNAMES seems to get a pouding when you google the name! This one for example - you'll need to add the usual prefix as the board won't let me post urls as a new member: ebusiness-gateway.co.uk/weblog/2004/11/pacnames-domain-transfers.html From this posting, the certainly sound as though they are not the kind of company I would wish to deal with. Is this kind of domain piracy legal? It certainly sound unethical for a professional outfit to email personal passwords to all and sundry - would there be a breach of the privacy laws here??? I'd be interested to hear any more views from other member on this subject