The following has been prepared for mailing and will be sent in the morning.
In Corruption We Trust
848 N. Rainbow Blvd. ● PMB #1326 ● Las Vegas, NV 89107-1103
Office of the New Jersey Attorney General
Division of Consumer Affairs
Consumer Protection Section
124 Halsey Street
Newark, New Jersey 07102
VIA FIRST CLASS MAIL, POSTAGE PRE-PAID
Date: December 27, 2007
Re: Consumer Protection – The Potentially Unfair, Fraudulent, Illegal, Harassing and/or Deceptive Business Practices of Too Much Media, LLC and VisoMedia, Inc. operated by John Albright, Charles Berrebbi and/or Kimberly Timko.
To Whom It May Concern:
I am writing to you today to express my sincere concerns about the manner in which two business entities conduct themselves while doing business from the State of New Jersey. I am referring specifically to Too Much Media, LLC and VisoMedia, Inc. which, on information and belief, appear to be operated and/or owned by John Albright, Charles Berrebbi and/or Kimberly Timko (hereinafter refereed collectively to as “TMM”).
On information and belief, these individuals and business entities do business from The State of New Jersey with the public via the Internet selling memberships to pornography sites and providing software that facilitates same.
They appear to do so from the following physical addresses and Internet websites, and possibly from others:
Addresses:
Internet Websites:
http://www.redpartners.com
http://www.toomuchmedia.com
http://www.getnats.com
http://www.teendolls.com
http://www.personalbucks.com
http://www.emilydoll.com
http://www.tinadoll.com
http://www.segpay.com
Over the holiday weekend, as the lead editor of a leading Internet-based publication known as In Corruption We Trust, I had the occasion to research and publish a story concerning the manner in which these companies and individuals responded and/or failed to respond to a suspected and later confirmed security breach within their organization. The breach involved the personal information of affiliate web masters and pornography consumers that have purchased memberships from - or resell as an affiliate – pornography sites that use the “NATS” software to track and manage sales data. The NATS software is made, maintained and marketed by TMM.
When I learned of the breach, I also learned of the apparent fact that TMM failed to notify all of the affected consumers or affiliate webmaster account holders as required by the laws of nearly 40 states, including New Jersey's 56:8-163. Said statute appears to require that those affected by a breach be notified without unreasonable delay. On information and belief, no one has notified the affected consumers yet and notifications have just now begun to affected affiliate webmasters. Reports seem to indicate that TMM knew about the breach as far back as October, 2007 but did little or nothing to resolve the issue.
No one is certain as to exactly what data has been breached because TMM has not been forthcoming with full details about the incident, though they continue to release statements saying that the situation is under control. It is my belief, however, that the compromised data may include names, addresses, social security numbers, telephone numbers, fax numbers, user names, passwords, sales & transaction history, credit card numbers, bank account numbers with routing codes and/or electronic mail addresses. I have no idea how many records have been breached exactly, but I conservatively estimate the number of records in question is at least ten thousand such records and possibly as many as several hundred thousand records or more.
After publishing my story, I have been continuously and ruthlessly threatened by various members of the adult industry including personnel representing TMM. John Albright, a senior executive of TMM has made several veiled threads of filing civil suit against me as retaliation for my criticisms of the way his company handled the breach. At least one other individual has remarked that John has also threatened to file a frivolous “SLAPP” (Strategic Lawsuits Against Public Participation) lawsuit when spoke out against the practices against his company within the adult industry.
In addition, several members of the adult industry have apparently expressed a desire to kill, maim or otherwise injury me and have also made references to putting “a contract” or “a hit” out on me. Some have also indicated that a contract in the amount of $25,000 exists at this time within the State of New Jersey. Furthermore, they have advised me to leave the state to avoid injury. I am without knowledge as to whether or not these threats are being made by or at the encouragement of staff members or others connected to NATS or TMM though I do not discount this possibility. Such threats are a direct attempt to intimidate and silence me as a critic of the manner in which the adult industry has handled this situation.
Finally, TMM recently acquired a payment processing company known as Segregated Payments, Ltd. This company is more commonly known as “SegPay”, and currently serves the EU market by providing transaction services The new management has stated that they have plans to open a US division to provide payment processing within the United States to United States consumers as a registered Visa IPSP.
You may have noticed that I have also carbon copied the major financial networks that provide credit card processing for Segregated Payments. It is my sincere hope that the payment networks will immediately suspend payment processing services to Segregated Payments until, if and when an accredited, independent third party has had the opportunity to conduct the necessary security audits and tests to ensure that the public is safe from further or additional violations of privacy or unauthorized disclosures of personal data.
I believe that the recent compromise, the manner in which it happened and the manner in which it was handled call into question the ability of TMM and related entities to effectively manage it's operations in compliance with the law. I sincerely believe that until the entities I have referenced herein have been throughly audited by regulators and an independent third-party security expert, all data that the company has care, custody or control over remains at grave risk for unauthorized wholesale disclosure in a manner certain to cause irreparable damage the interests of its customers and the general public.
For protection of the adult industry as well as the safety, privacy and protection of consumers of pornography, I request that your agencies open an exhaustive and full inquiry into this matter. I have attached several documents to this correspondence which demonstrate the reasons for my concerns. I am confident that should TMM be permitted to continue operations in it is current manner, there is a very strong possibly that this will not be the last breach that I report with regard to companies owned or connected to the above named entities.
I may be reached by mail at the address at the top of my letterhead, by phone and fax at (206) 666-1988 or via electronic mail to
[email protected]. I appreciate your prompt attention to this urgent matter and thank you in advance for your consideration.
Sincerely yours,
Keith Kimmel
Chief Editor, ICWT
Enclosures:
Tens of Thousands of Adult Website Records Compromised, ICWT, 12/23/2007 (Story Begins on Page 7 of Printouts)
AVN: Too Much Media Acquires Equity Stake in Segregated Payments Ltd., 12/11/2007
Post #1 from GFY.com Thread #794159 - Re: OC3 Report on Discovering Breach
Post #1 from GFY.com Thread #794219 - Re: Confirmation of Breach by TMM
Post #29 from GFY.com Thread #794848 - Re: Death Threats
Posts #418 & #427 from GFY.com Thread #794749 - Re: SLAPP Suits Threatened by TMM
Post #5 from hahahahahahahahahaha.com Thread #81703 - Re: TMM Claims No Exploit
Carbon Copies (with Enclosures & Attachments)
United States Department of Justice
Office of The Attorney General of the United States
950 Pennsylvania Avenue, NW
Washington, DC 20530-0001
Mastercard International
Attn: Regulatory Compliance Team
2200 Mastercard Blvd
O Fallon, MO 63368-7263
Visa Inc.
Attn: Legal Affairs Dept. M3-3D
P.O. Box 8999
San Francisco, CA 94128-8999
DFS Services, LLC
Attn: Merchant Services
2500 Lake Cook Rd
Riverwoods, IL 60015-3851