royalsupply.com

[vssykes]

I have ordered a few items from www.royalsupply.com and had my credit card informaion stolen on both occasions. Just curious if anyone else has any experience with this company or if it's a security problem on my end. I received exactly what i ordered in a timley manner both times but its a hassle dealing with the bank over fradulent charges. Thanks for the input.

 

[Obie]

Yeah, I had $1700 worth of fraudulent charges on my debit card after ordering from them. Until you mentioned it, I thought it was from finally hooking my PS3 back up to the internet so I could get netflix. Looking at the dates of the charges, it seems to be from that website. And, they took ten ******** days to process my order, and another week in shipping times.

It kinda ***** too, because they have pretty much the full Wright stock. Most other places don't carry the singles.

 

[bart1]

What? Order your Wright from Epstein. I just did.

 

[Obie]

Yeah, when I ordered the wrenches I wanted though, Epstein's didn't have the full polish SAE and metric sets + singles. And last I checked, there will still a few thing Epstein's didn't have that RS did. Not like I'm ordering from them again though, after seeing that another person got hit with fraudulent charges.

vssykes, have you contacted RS and told them about what's been happening?

BTW: Highly recommend Epstein's to anybody who likes Wright tools, their customer service has always been truly outstanding and I love dealing with people who care as much about quality tools and made in USA as they do.

 

[bart1]

Epstein can order anything and they matched RS prices on my order

 

[jsackin]

The next big project that Epstein's is going to start on is for special ordering Wright. Starting next month we will be working on a system that shows you all of what Wright Tool sells, quotes you prices (they will be no higher then our normal Wright stock) and let's you order anything online. Hopefully we will be finishing this up at the end of August. If this works for Wright we will take this special ordering option to other companies as well.

thanks

Jori
http://store.harryepstein.com

 

[north]

Thanks for the heads up vssykes. I've had them on my list for potential suppliers for Wright.

Thanks for your heads up too Jori. Been meaning to ask you about ordering Wright tools not in stock. Gonna have me some wrenches and ratchets in the future. But first I will await the order I put in yesterday. Hurry up with confirmatiom on the shipping will you?

 

[TheGrooveking]

Glad I only used paypal with Royal Supply....another vendor for online Wright is Hardwaresales.com I've bought from them to and had no issues. Of course once Epsteins get more of the Wright line online, that may be my goto place for Wright.

TheGrooveking

 

[Wakefield]

I had a new credit card # that replaced another one that got charges from someone else on it. After that one got cancelled I used the new one at Royal Supply online and a day or so later someone tried to charge using that new one and R.S. had been the only use of that one. Bank rejected the (fraud) charge,e-mailed me.
Could be a dishonest employee at any level somewhere there? Would think that the banks would be onto it. Shame if a good business is getting taken down by a simple bad hire.

 

[Altec]

Have you guys talked to them, or inform your banks of the source of trouble. That is pretty serious.

 

[TheGrooveking]

Unless all of you have your credit cards from the same bank, most likely its either an insider at Royal Supply or a hack has done something to scam info from their ordering screens.

TheGrooveking

 

[Charles (in GA)]

Need to contact Royal's top level management directly, I'll bet its an insider job, and they need to know.

Charles

 

[tube_guy]

I started to order a ratchet from Royal Supply, maybe a year ago or so. If I remember right, during the ordering process they asked me for additional information in some sort of credit card verification process. I never supplied the additional information and just stopped the order. But right after that, fraudulent charges started to appear on my credit card too. Just a few small 10 dollar charges appeared on my card before I caught the problem and shut the card down. At the time, I wasn't sure where or how the information was stolen. Now I guess I have a pretty good idea.

 

[slipjointed]

I think that wright needs to be contacted immediately with this info... I can't imagine that they would knowingly allow one of their top online resellers to continue to scam customers.

Im leaning towards this being a single bad employee, but who knows. Perhaps its even the person who takes complaint emails, so they never reach management.

I just ordered from them and got my stuff after about 9 business days, which I considered reasonable. This really ***** because they have the best pricing on many wright items. Luckily id used paypal on my only order from them.

 

[WHT]

I started to order a ratchet from Royal Supply, maybe a year ago or so. If I remember right, during the ordering process they asked me for additional information in some sort of credit card verification process. I never supplied the additional information and just stopped the order.

The same happened to me.

And, their customer service people were less than helpful IMO.

 

[Obie]

Well, I sent messages to my bank, Royal Supply, and Wright with a link to this thread. Hopefully something gets fixed. I'd hate for thieves to tarnish the reputation of one the best tool companies around.

 

[slipjointed]

Well, I sent messages to my bank, Royal Supply, and Wright with a link to this thread. Hopefully something gets fixed. I'd hate for thieves to tarnish the reputation of one the best tool companies around.

Good on you. I also contacted Wright and Royal, as I was planning on placing an order with them. Instead I ended up calling Epstein (as I didn't realize that you could special order over the phone).

 

[jsackin]

I went ahead and contacted the local Wright representative here in Kansas City. I sent him a link to this thread, so I'm sure that will make it's way around.

Jori
http://store.harryepstein.com

 

[WrightTool1]

Gentlemen,

Thank you for notifying me of this issue. We are currently looking into the situation, and will notify you when we have more information. Obie, your catalog is on the way!

Ty Smith
Wright Tool Company

 

[bart1]

Ty, you sent me a catalog a couple weeks ago and I placed an order through Epstein this week. Look forward to adding more Wright to my boxes.

 

[Obie]

Gentlemen,

Thank you for notifying me of this issue. We are currently looking into the situation, and will notify you when we have more information. Obie, your catalog is on the way!

Ty Smith
Wright Tool Company

Awesome! Although I just sent you a reply e-mail twenty seconds before I noticed this thread had been responded to, haha. Can't wait for the catalog to come in, it's always better to be able to circle and highlight. Can't do that in electronic catalogs.

And thanks for actually taking the time to investigate and respond!

 

[bart1]

Awesome! Although I just sent you a reply e-mail twenty seconds before I noticed this thread had been responded to, haha. Can't wait for the catalog to come in, it's always better to be able to circle and highlight. Can't do that in electronic catalogs.

And thanks for actually taking the time to investigate and respond!

Mine is a CD...

 

[Obie]

Really? Ahh, ****. Can't really read those when taking, well, a ****.

 

[WrightTool1]

If anyone would like a hard copy catalog that is a member of this site, I would be happy to send one to you. PM me your Name and Address and I'll get one sent out!

Ty Smith
Wright Tool Company

 

[Altec]

If anyone would like a hard copy catalog that is a member of this site, I would be happy to send one to you. PM me your Name and Address and I'll get one sent out!

Ty Smith
Wright Tool Company

You are a terrible influence!

I've been trying to decide between Williams, and Wright for new wrenches this winter. Between you, and Jon from Epstein, I'm about set on this decision...

 

[Obie]

Yes, get the Wrights. You'll never regret your decision and their beams are the most comfortable I've ever used.

 

[route246]

I just looked at their whois record. The thing that jumps out is IIS6 which is old and not secure. I would not jump to conclusions and blame Royal Supply for this. Their hosting situation is probably to blame. If you search 'iis6 security' or something like that you will see that it has severe challenges. I'm not sure if Microsoft has patches or not to seal the holes.

royalsupply.com
Current Registrar: TUCOWS.COM CO.
IP Address: 162.40.35.151 (ARIN & RIPE IP search)
Record Type: Domain Name
Server Type: IIS 6
Lock Status: clientTransferProhibited
WebSite Status: Active
Registrant:
Royal Supply, Inc.
1209 Lowell Street
Elyria, OH 44035
US

 

[Wakefield]

So the computer at their web service could have a backdoor/bot on it that sends credit card numbers to the hack owner as soon as an order is received?

 

[route246]

Yes, probably some sort of exploit that allows for the bad guys to get access to the confidential data. That's the usual thing with these sorts of infections. It's just a theory but the fact the server answered with IIS 6 is very suspicious.

 

[route246]

From netcraft:

http://www.royalsupply.com was running Microsoft-IIS on Windows Server 2008 when last queried at 3-Aug-2011 23:12:31 GMT - refresh now Site Report
Try out the Netcraft Toolbar! FAQ
OS Server Last changed IP address Netblock Owner
Windows Server 2008 Microsoft-IIS/7.5 3-Aug-2011 162.40.35.151 Holland Computer

Might have been updated recently...

 

[route246]

Here is their hosting:


Rank Site Organisation First Seen Webserver OS
- avonlake.org unknown July 1999 Microsoft-IIS/6.0 Windows Server 2003
- loraincountysheriff.com unknown December 2007 Microsoft-IIS/6.0 Windows Server 2003
- pet-dog.com unknown December 1999 Microsoft-IIS/6.0 Windows Server 2003
- www.royalsupply.com unknown March 1998 Microsoft-IIS/7.5 Windows Server 2008

Lorain Country Sheriff and the others look like they are still vulnerable. Royalsupply probably got fixed very recently...

 

[lametec]

I ordered something from Toolfetch.com the other day, and 20 minutes later there was a test charge of $2.**, then a $525 charge for some ticketing service.

Could be a coincidence, of course. I've had bogus charges on my card before, and the issuer simply reversed/removed them. This time they closed my account and opened another one.

 

[WrightTool1]

Gentlemen,

We spoke with Royal Supply on this issue last week. It seems as though it is some sort of malware/virus that is hi-jacking credit card information on the purchasers side.. The independent secure server from has been thoroughly examined on Royal's side, and is safe. Royal is a trusted distributor of Wright Tool, and they will continue to be. Please let me know if there are any other instances that come up of this sort.

Best Regards,

Ty Smith
Wright Tool Company

 

[lametec]

If that was the case, wouldn't it be "hi-jacked" when using a CC on any other site as well. I'm going to go out on a limb and say that royalsupply.com is not the only site these people use their CCs on.

 

[route246]

Let me add my opinions here. Again, I work in this field so I know a little about how these things operate. I'm not an expert, nor should you trust anyone who claims to be an expert because these security exploits are continuously evolving and nobody is going to know how the "next one" works.

What is not made clear here is the maintenance/update history of Royal's SSL transaction mechanism. It might be secure as of right now but what about a few weeks ago, a few months ago, a year ago, etc.? I would be far more satisfied if they said that patches are being continuously applied to thwart the latest attacks or something like that. These things are not static. Exploits evolve and are continuously being invented. There is a risk anytime you transmit your confidential information over the Internet so to make a statement like this is irresponsible, if they indeed did make this statement. They are shrugging their shoulders and shooting the messenger.

My advice to anyone doing credit card transactions over the Internet is to get a special, low-limit, dedicated credit card for Internet purchases only. I've been doing this for a long time and it works well. It's linked to my bank so I can immediately transfer funds to it to pay off the balance immediately to clear up space for the next purchases. I've had it hijacked a few times in the 8+ years I've had it. It's a simple phone call to the bank to order a new one and get charges removed.

The only site I trust with my regular cards is Amazon. It's a leap of faith that Amazon won't screw up but if anyone is not going to screw up it is Amazon. Additionally, if they did screw up they would notify customers very quickly. I have that much faith in them. I don't trust any other web site.

Gentlemen,

We spoke with Royal Supply on this issue last week. It seems as though it is some sort of malware/virus that is hi-jacking credit card information on the purchasers side.. The independent secure server from has been thoroughly examined on Royal's side, and is safe. Royal is a trusted distributor of Wright Tool, and they will continue to be. Please let me know if there are any other instances that come up of this sort.

Best Regards,

Ty Smith
Wright Tool Company

 

[slipjointed]

Interesting, it looks like their site is completely down right now, I'd guess for some patches.

I don't really buy the whole "it's all the customer's fault" thing. When you have multiple customers that have been getting hit only when they give their info the this one site, and nowhere else, then something is fishy.

That said, I do appreciate Wright looking into it, but I think for now I will be spending my Wright money at Epstein.

 

[Altec]

On a lighter note, the Wright Catalog showed up today!

 

[jeffmoss26]

I only got a CD catalog

 

[Obie]

So, bringing an oldish thread back for a minute. Has anyone recently made a purchase from royal supply? I wanted to get a few new sets of some Wright hex bits and other small things, and I'm up in the air about getting them special ordered through Epstein's or going through royal again.

 

[TheGrooveking]

Use Paypal and you should be fine, I don't know if everything has been straightened out with their website.

TheGrooveking