abwsco Posted January 20, 2011 Share Posted January 20, 2011 If you shopped online with them between the 4th Oct 2010 and 20th Jan 2011 they're advising you to contact your bank for advice as their site was hacked. linky Quote Link to comment Share on other sites More sharing options...
Griffin Posted January 20, 2011 Share Posted January 20, 2011 That's me then. Will call my bank tomorrow and no doubt speak to someone in a foreign call centre who hasn't a clue what I'm talking about and is as much help as a chocolate teapot Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted January 20, 2011 Share Posted January 20, 2011 Hmmmmmmmmm..... I wonder if that is how my Mastercard got hijacked? Quote Link to comment Share on other sites More sharing options...
sari Posted January 20, 2011 Share Posted January 20, 2011 I've posted this on my FB and my Guiding Forum earlier on....I've phoned my bank and had a good chat to someone called Omar in New Delhi. He said not to worry...they'll put a stop to any dodgy payments and ring me...He hadn't heard of Lush:) Keep an eye out for small multiple payments, like O2 or Tesco Mobile...if they go through they make massive withdrawals later on... Quote Link to comment Share on other sites More sharing options...
The Dogmother Posted January 20, 2011 Share Posted January 20, 2011 I spotted that too, they are very apologetic on their website. OUR WEBSITE HAS BEEN THE VICTIM OF HACKERS. 24 hour security monitoring has shown us that we are still being targeted and there are continuing attempts to re-enter. We refuse to put our customers at risk of another entry - so have decided to completely retire this version of our website. For complete ease of mind, we would like all customers that placed ONLINE orders with us between 4th Oct 2010 and today, 20th Jan 2011, to contact their banks for advice as their card details may have been compromised. We Believe hacking is a serious crime which steals large amounts of money and disrupts the lives of cardholders. We Believe that hacking erodes the trust between businesses and their customers and creates a climate of fear around online ordering. We Believe in working with police and banks to do all we can to bring this branch of organised crime to justice. Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted January 20, 2011 Share Posted January 20, 2011 There are not too many companies who would be so open and honest about this sort of thing. This is certainly where my fraud came from..... Quote Link to comment Share on other sites More sharing options...
Sam Posted January 20, 2011 Share Posted January 20, 2011 TO THE HACKERIf you are reading this, our web team would like to say that your talents are formidable. We would like to offer you a job - were it not for the fact that your morals are clearly not compatible with ours or our customers'. Love that. Quote Link to comment Share on other sites More sharing options...
chestnutmare Posted January 20, 2011 Share Posted January 20, 2011 I'm on the phone to my bank as I type. I was puzzled over an '02 payment' (as I'm with Orange). Now it all makes sense. Quote Link to comment Share on other sites More sharing options...
abwsco Posted January 20, 2011 Author Share Posted January 20, 2011 There are not too many companies who would be so open and honest about this sort of thing.This is certainly where my fraud came from..... Have your bank told you that Sarah. Quote Link to comment Share on other sites More sharing options...
chestnutmare Posted January 20, 2011 Share Posted January 20, 2011 My card has been cancelled. Awaiting a new one now. This is the first time for anything 'dodgy' to happen on my account. And I've now learnt to properly think about every transaction on my account rather than scanning my statement. Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted January 21, 2011 Share Posted January 21, 2011 There are not too many companies who would be so open and honest about this sort of thing.This is certainly where my fraud came from..... Have your bank told you that Sarah. Yes,I called them yesterday & they said that it follows the pattern of the Lush sting exactly Quote Link to comment Share on other sites More sharing options...
ClaireG Posted January 21, 2011 Share Posted January 21, 2011 Also look out for odd amounts for charity donations. This has happend to me before. Luckily, the bank picked up that a donation of £2 had been made to Oxfam and put a block on my card. Quote Link to comment Share on other sites More sharing options...
lillybettybabs Posted January 21, 2011 Share Posted January 21, 2011 Cahoot fraud office called me a week ago to question a payment to an electrical online store for £5 @ 17.15 on a thursday. It wasn't me as i was at work. They declined it just in case and have sent me a new card, It all makes sense now. Quote Link to comment Share on other sites More sharing options...
Griffin Posted January 21, 2011 Share Posted January 21, 2011 I had to repeat what had happened three times to the chap at Santander before he cottoned on to the fact I needed to cancel my card and how flaming annoying it was that since they 'enhanced' the security on their website I cannot log in to check my account. Goodness knows what's been going in and out of it and I'll only find out in 7-10 days when my new log in details arrive. There isn't a branch for miles around so I'll just have to wait and see I really really hate Santander with a passion. Phoning them is never easy. All I ever want to do is speak to a human being who knows what they're doing and it's such a rigmarole. They first give four options, none of which apply to me, so they repeat them again and I carry on ignoring them. Then I'm asked to key in my card number, simples. Until it then wants my telephone banking number. I don't have one. It asks me three times. I ignore it three times. Then I finally get put in a queue to speak to a person. I really look forward to a repeat of this fun and games should someone have actually used my card details fraudulently Quote Link to comment Share on other sites More sharing options...
bluekarin Posted January 21, 2011 Share Posted January 21, 2011 I had to repeat what had happened three times to the chap at Santander before he cottoned on to the fact I needed to cancel my card and how flaming annoying it was that since they 'enhanced' the security on their website I cannot log in to check my account. Goodness knows what's been going in and out of it and I'll only find out in 7-10 days when my new log in details arrive. There isn't a branch for miles around so I'll just have to wait and see I really really hate Santander with a passion. Phoning them is never easy. All I ever want to do is speak to a human being who knows what they're doing and it's such a rigmarole. They first give four options, none of which apply to me, so they repeat them again and I carry on ignoring them. Then I'm asked to key in my card number, simples. Until it then wants my telephone banking number. I don't have one. It asks me three times. I ignore it three times. Then I finally get put in a queue to speak to a person. I really look forward to a repeat of this fun and games should someone have actually used my card details fraudulently Oh tell me about it. We had a load of money taken from our business account a year or so ago, and the hours and hours and faf my hubby went through! Cancelling cards so we had no access! It was finally sorted out, but it makes you think twice about phoning them. I am so glad that I didn't buy anything from them this year, as I was going to get the kids a bath bomb each *phew* Hope you all manage to get your fraudulent activities sorted swiftly and easily. Quote Link to comment Share on other sites More sharing options...
Chucky Mama Posted January 22, 2011 Share Posted January 22, 2011 There is an article about it here CLICK Quote Link to comment Share on other sites More sharing options...
WarrensWorld Posted January 22, 2011 Share Posted January 22, 2011 There's this article from the Guardian. I can't see any nasties in the comments section, at least not when I read them:- http://www.guardian.co.uk/money/2011/jan/21/lush-website-hack-customers-fraud?INTCMP=SRCH Quote Link to comment Share on other sites More sharing options...
Lesley Posted January 22, 2011 Share Posted January 22, 2011 It isn't where my fraud originated as I haven't shopped online with Lush, only in the store. Mine was sorted straight away by Barclays but with no explanation - oddly, the only online payment I'd made at the time wasn't strictly 'online'....I'd gone to pay my subscription for Home Farmer and noticed that their payment page wasn't secure - no https and no padlock - so I phoned and mentioned it and gave my details over the phone Nice to see Lush taking a positive stance over this. Quote Link to comment Share on other sites More sharing options...
sari Posted January 22, 2011 Share Posted January 22, 2011 I'm a bit angry that it was first hacked on 26/27th December, and they are only telling us now.....not good customer service! Quote Link to comment Share on other sites More sharing options...
ubereglu Posted January 22, 2011 Share Posted January 22, 2011 I'm a bit angry that it was first hacked on 26/27th December, and they are only telling us now.....not good customer service! Yes, but you don't know when the company discovered this had happened. The start date will be when they managed to track back the problem to when it first occured I suspect. Quote Link to comment Share on other sites More sharing options...
Geoid Posted January 22, 2011 Share Posted January 22, 2011 The problem with hackers is that you dont know they have been. Quote Link to comment Share on other sites More sharing options...
sari Posted January 22, 2011 Share Posted January 22, 2011 I'm a bit angry that it was first hacked on 26/27th December, and they are only telling us now.....not good customer service! Yes, but you don't know when the company discovered this had happened. The start date will be when they managed to track back the problem to when it first occured I suspect. Well, I assume ( I know. ..) that the fact that the site was shut for several days after Christmas due to "website tech issues" was when they first discovered it, and were trying to fix it. Perhaps I'm wrong, but it seems like too much of a coincidence to me. Don't mistake my criticism, I'm a huge fan on Lush....but it seems like they dropped the ball on this one. Despite their Faire Trade, Animal Friendly etc....status, they are a multinational company, and can't be let off he hook by posting a video of lemmings. Would everyone be so understanding if it was Boots or Topshop?? I'm not being argumentative..but reading some of the "fluffy bunny" comments of the Lush FB page has made me really cross Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted January 22, 2011 Share Posted January 22, 2011 They have actually been very honest that they did not spot the hack or inform people as quickly as they may have liked.,& have apologised for this. I wonder if Boots or Topshop would have apologised at all,seeing as it is not the companies fault that they are hacked Quote Link to comment Share on other sites More sharing options...
sari Posted January 22, 2011 Share Posted January 22, 2011 Maybe they would, maybe they wouldn't....but I just find the fluffy bunny-ness that ha surrounded all the coverage annoying...Lush maybe people and animal friendly, but they are multinational corp all the same. Quote Link to comment Share on other sites More sharing options...
karlotta Posted January 23, 2011 Share Posted January 23, 2011 I had to have a card cancelled because of this too so not happy. It's surely the first rule of ecommerce that you either don't store card details on your website or else store them in an encrypted manner. To store them unencrypted is reckless and dangerous. FYIW I'm a big fan of how Lush (a local company for me) do things usually... Quote Link to comment Share on other sites More sharing options...
