Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsBest Buy’s account-hacking warning was reported on July 11, 2012—not as a current incident. The warning said attackers appeared to be trying username-and-password combinations obtained elsewhere to enter BestBuy.com accounts. It did not establish that Best Buy’s own systems had been breached. SecurityWeek’s July 11, 2012 report said the company disabled the recipient’s password and asked them to reset it.
What did Best Buy warn customers about?
SecurityWeek reported that Best Buy was responding to an increase in malicious attempts to access online customer accounts. The warning letter reportedly said the attackers were using credentials taken from elsewhere, rather than credentials stolen from a Best Buy system. Its central distinction was: “These hackers did not take username/password combinations from any Best Buy system; they appear to be using combinations taken elsewhere in an attempt to gain access to BestBuy.com accounts.”
The letter reportedly told its recipient that their current password had been disabled and asked them to reset it. SecurityWeek also noted customer confusion and said the scope of the activity was unclear. The report did not provide a count of attempts or establish that any particular Best Buy system had been breached.
Did Best Buy get hacked?
The 2012 warning, as reported, described attempted logins using username-and-password combinations believed to have been obtained elsewhere. It is not evidence that Best Buy suffered a breach that exposed those credentials. A login attempt and a breach of the service being targeted are different events: attackers can try passwords leaked from another site against accounts on BestBuy.com.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
Best Buy disclosed a separate incident in 2018 involving an intrusion at its third-party chat technology provider, [24]7.ai, reported to have occurred from September 27 through October 12, 2017. That incident is distinct from the 2012 account-access warning and should not be treated as proof of what happened in 2012. Best Buy’s April 5, 2018 statement describes the later third-party incident.
What to do if you receive an account warning
If you receive a legitimate notice that your account may have been accessed, use Best Buy’s official website or app by navigating there yourself, rather than following a link in an unexpected message. Best Buy’s online account guidance recommends using different passwords across websites. If unauthorized access occurred, it advises changing the password and security questions, checking account details, and reviewing charges on stored payment cards.
- Change reused or exposed passwords. Create a unique password for BestBuy.com and for any other account that used the same password. Change security questions as well if you believe they may have been exposed.
- Review the account. Check contact and account details for changes you did not make, and inspect transactions associated with stored cards.
- Address suspicious charges. Contact the bank or card issuer about unauthorized transactions, and contact the retailer through a trusted channel.
- Verify unexpected messages independently. Best Buy advises against clicking links in suspicious emails, texts, or websites. Open a fresh browser window or use a known official contact route to check whether a message is genuine. Its fraud and scam guidance recommends contacting organizations through trusted channels.
The Federal Trade Commission gave similar advice in a separate 2003 alert about a fake “Fraud Alert” email impersonating Best Buy: anyone who supplied financial details should contact their bank or card company immediately and verify requests for personal information directly with the company. That phishing scheme is unrelated to the 2012 account-access warning. FTC alert, June 18, 2003.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
