At 06:57 AM 10/11/2001, Simon Gales wrote: >I received the following email this morning (appropriately cleansed): > >[SNIP] > >I've notified privacy@webcertificate.com and VISA, and am awaiting their >response. FYI: The number that is claimed to be a "credit card" number in these malicious e-mails is not one. It's the serial number of a "Webcertificate." There is therefore no reason to notify your credit card issuer. The vendor knows which numbers were compromised and has invalidated them already, so there is no risk of theft. Users will receive new certificate numbers and will not lose credt from their accounts. --Brett