I have good reason to believe that certain information has been shared to third parties without my consent. This information has subsequently been put to malicious use by the same third parties which may involve a substantial loss incurred by me. There are two possible sources for this information, my Outlook email address which isn't widely shared and is used only for matters relating to finance, or the Numista private messaging system. Outlook is possible but unlikely, that leaves Numista as the most probable source. These are the only two places where this particular information was exchanged. Of course there is the third possibility, that it was the recipient or even JP Morgan but that's not something I even want to consider.
Let me be clear, I know who the third parties are, what information was disclosed and will be taking every possible action against them. What I need to know is where they got the information from and who supplied it.
I refer you to article 13 in the Terms of Service -
Your messages sent via the private messaging system of the site may be read by Numista.
Can somebody clarify who exactly constitutes the "Numista" in this context? The webmaster? The Team Members? Moderators? Referees? Members like Coinsoldier and Shamikb? I think this needs to be clarified, not just because of this current issue, but because members ought to know exactly who is reading their private messages and accessing their private information.
I understand that the Webmaster needs such access to ensure that the site isn't being used for illegal purposes. Said webmaster has always conducted matters in an admirably professional manner and doesn't strike me as being a remotely likely source. (He probably doesn't have the time, even if he had the inclination) However given the sometimes poor standard of Team Members, especially newer recruits for whom the bar seems to have been lowered considerably, I'm sure I'm not the only one who finds it concerning that personal information can be accessed by people of much lower moral calibre.
The "Team" contain at least one widely known scammer and several members who are still not old enough to be held criminally liable. The public conduct of some is nothing short of disgraceful. If these were my children I'd be pulling down their little breeches and spanking them. Most are level headed and impeccably behaved but I think everyone is aware that there are exceptions.
It's not uncommon for members to exchange email addresses, telephone numbers, physical addresses, PayPal accounts and even banking information. That kind of information deserves a more secure environment than one which can be accessed by "Numista" which may or may not include some teenagers of very questionable character.
So, could someone give me a definitive answer as to exactly who has these permissions. If it's Xavier and Xavier only, then I will consider the matter closed, thank you for allaying my fears, and take the problem up with Microsoft. Disregard everything beyond this point if this is the case.
However, if it's pretty much every Tom, Dick and Harry who puts his name forward as a Team Member then we have a huge problem. Now I'm not the brightest bulb on the Christmas Tree when it comes to these matters but I'm pretty sure it ought to be possible to review the server logs and find out who has accessed my private messages and on what date? If so I would be very grateful for your assistance and in anticipation of the removal of such undesirables from the team. Information provided will be accorded every confidence.
Again, I refer you to the Terms of Service article 24 -
Numista implements security protections to preserve your personal data, but Numista is not responsible in case a third party access the date beyond the control of Numista, or the consequences of such access.
I would contend that allowing disreputable individuals unfettered access to one's personal information would be entirely within the control of Numista and hence there is an assumed liability. I'm not exactly a lawyer (I don't need to be, thank you pre paid legal insurance!) but it seems that this would negate the "beyond our control" clause, no? (PS You might want to change "date" for "data". You're welcome!)
Your urgent attention, co-operation and remedies are both anticipated and appreciated, thanks in advance.
May I make a request for your own well being and peace of mind...... For your own sake PLEASE restrict the Admin Team to those adults (18+) who can be held criminally liable for their actions. If you are allowing unsupervised minors free access you might find that their liability passes to you.