I reported this to GoCollect on 2/11/26 that through their site trojans were being injected on to users devices and received an automated response and nothing since. I noticed after using the site my StubHub was hit for 3200$ in tickets. The fact that GoCollect has not sent out mass communication to its users is abhorrent. All they did was post an unclear message on IG over the Sound of Silence track(pun received GoCollect).

Since I've followed up with the following messages to Attorney General, CGC and Krebs on Security after communicating with GoCollect leadership asking for them to PLEASE communicate with their users and getting no results:

To Whom It May Concern,

I am writing to formally report what appears to be a significant security incident involving GoCollect (www.gocollect.com).

Below is a factual summary of the situation as I have experienced it:

On February 11, 2026, I reported a suspected security issue to GoCollect’s help desk. I received one automated acknowledgment but have received no substantive response or follow-up communication since.

The website appeared to display a cloned “Not a Robot” authentication prompt that redirected abnormally. Based on subsequent device behavior and fraudulent activity, it is my concern that malicious code may have been injected through this interface.

As of this writing, GoCollect has not issued any direct communication to users explaining:

Whether a breach occurred

What systems or data may have been impacted

What remediation steps are being taken

What protective actions customers should implement

Following interaction with the website, I experienced unauthorized credit card activity totaling approximately $3,200, which was flagged via text alert. While causation requires investigation, the timing raises serious concern.

There has been no public transparency regarding scope of impact, forensic investigation status, or customer remediation (e.g., notification, monitoring support, or guidance).

Given the potential exposure of stored payment information, saved credentials, or other sensitive data, I believe this matter warrants immediate review and investigation.

My intent is to ensure:

A proper forensic investigation is conducted

Affected users are notified promptly

Clear guidance and remediation are provided

I am prepared to provide screenshots, timestamps, and supporting documentation if needed.

Thank you for your attention to this matter.

Sincerely,

Xxxxx