LUSH - Important News - UPDATED

StumpyPumpy

SallyG wrote: »

I'm racking my brains to think of anything they might have set up in the maybe months between them stealing my card details and me cancelling the cards - I mean something nasty that might surface years from now - this is feeding my paranoia to bustin.

You can put your paranoia on a diet. You can only be held liable for anything they may do with your card details up to the point that you notify your bank and cancel the cards. And in the case of obvious fraud most banks waive that too liability too.
While it is always worth keeping an eye on your future statements, the card number the bad guys have now is as useless to them as if they had just made it up and attached it to your name. As long as the bank have successfully cancelled it, even if the crooks manage to purchase a small Caribbean island with it you will never know as it won't reach your statements.

Simmysim

For Lush fans, this site is nice
http://cart.bombcosmetics.co.uk/index.php?p=catalog&parent=111&pg=1

alisont

Just checked my online banking for statements - my bank picked up on a test for Sky and rang me to see if it was me ordering Sky - as it was not they cancelled my cards , got a new card quickly and was able to get cash needed with photo ID at the counter. They did say several 1p checks from phone companys had been tried too again not me. Not as bad as earlier last year when they rang me at work here to check I was not in the USA buying a car!!!

Now I know where my card was 'done' as I had used my card at Lush online a few days prior to the bank ringing me.

Least this means I don't have to cancel my card again, at the mo.

Am now even more nervous about online shopping, post it on the monitor to remind me my anti virus is up next month - will be renewing Eset nod 32 on main pc and think I'll add it on my netbook too.

Only site It seems insists on storing my card details is Apple itunes - think I'll spend the remaining £10 gift voucher I've got on there on apps or music for my itouch and remove my card details. Don't feel leaving them on there is safe.

charliemaine1bee

my friend who bought lush gifts online 3 weeks before Christmas has had 2 x £15 02 top ups taken from his account today.Hes just cancelled his card..x

kazzaw

alisont wrote: »

Only site It seems insists on storing my card details is Apple itunes - think I'll spend the remaining £10 gift voucher I've got on there on apps or music for my itouch and remove my card details. Don't feel leaving them on there is safe.

Just had my iTunes a/c hacked!! 15 x £10 monthly gifts to a random hotmail address in one day! Luckily an automatic block was put on my debit card. Please remove your card details from your account. It can be done through "my account"

According to my bank this has happened to 50.000 people recently and if you do a Google search you'll find it's been happening for years!! At least Lush have done something about it. Apple seem to sweep it under the carpet!!

ChristinaGYoung

GemJar wrote: »

It seems you may work for lush, so, I have a question for you. On the website it says that you know that you are still being targeted by hackers after '24 hour security monitering', so, does that mean between 4th Oct 2010 and 20th Jan 2011 there was no security monitering in place to protect customers details? Conveniant that it was just over the christmas period.

Personally, I'm disgusted with lush and won't be buying from them again, in store, on the phone or online.

I do not work for Lush. I am a regular customer and forum user and I have simply read all the information provided by the company thoroughly before allowing anger to cloud my judgement as some people appear to have done or not absorbed all the facts. I have had my card used thanks to this but I am not mad at Lush as I said before I have experience of much worse treatment by other online retailers regarding fraud as have other Lush forum users.

alisont

kazzaw wrote: »

Just had my iTunes a/c hacked!! 15 x £10 monthly gifts to a random hotmail address in one day! Luckily an automatic block was put on my debit card. Please remove your card details from your account. It can be done through "my account"

According to my bank this has happened to 50.000 people recently and if you do a Google search you'll find it's been happening for years!! At least Lush have done something about it. Apple seem to sweep it under the carpet!!

Thanks will do that today. Not got my card details stored elsewhere - Play.com has an old card on there but will remove that - cards long gone. Think my Dads card is on Amazon must speak to him about that.

Maybe I should ask the bank about a 2nd card that I preload with money if I want to use a card online, must be some pre pay card schemes out there. At the mo I shall ring companies to pay over the phone.

alisont

http://www.dailymail.co.uk/news/article-1349513/Thousands-bank-details-risk-hackers-hit-Lush-website.html

oakhouse13

http://www.bournemouthecho.co.uk/news/8806799.Lush_tries_to_placate_customers_after_website_falls_victim_to_hackers/

Contains more information than I've read elsewhere and perhaps a wider warning for all shoppers who have passed their card details to Lush's website at any time.

The reference to the site being shut between Xmas Day and New Year - is that true? Weren't there reports on Grabbit over that period of people making purchases on the website?

shikoku

Just to confirm that a refund made to a card I had since cancelled has just gone back into my bank account without any problems.

(For those of us who were concerned about this aspect of things.)