LUSH - Important News - UPDATED

Mithvingiel

alisont wrote: »

http://www.dailymail.co.uk/news/article-1349513/Thousands-bank-details-risk-hackers-hit-Lush-website.html

It's says in this article that they found out on christmas day but they haven't said anything 'til now!!

m4ndy1966

Just realised I had an email from Lush yesterday and had forgotten I had placed an order online on 4th December. Lloydstb website is down this morning which is not helping as I want to check my account! I have cancelled my debit card to be on the safe side regardless.

What other sites other than O2 have been used to fraudulently access accounts?

hallmark

shikoku wrote: »

Just to confirm that a refund made to a card I had since cancelled has just gone back into my bank account without any problems.

(For those of us who were concerned about this aspect of things.)

IIUC correctly it may depend on the card. If it was a debit card then refunds should work even if you are being issued a new card with a different number. However refunds to c/cards who's numbers have changed might fail.

meerustar

kazzaw wrote: »

Just had my iTunes a/c hacked!! 15 x £10 monthly gifts to a random hotmail address in one day! Luckily an automatic block was put on my debit card. Please remove your card details from your account. It can be done through "my account"

According to my bank this has happened to 50.000 people recently and if you do a Google search you'll find it's been happening for years!! At least Lush have done something about it. Apple seem to sweep it under the carpet!!

I got hacked on iTunes before xmas, but luckily I never had my bank details registered, I just redeem the iTunes cards, so now if ever I want to download something from there, I pop to the shops and get a new card. Much safer

wotnext

I received this email too. I ordered two small gifts in Nov/Dec.

On 13th of this month I discovered fraudulent use of my bank card (payments to 02, car hire etc). I reported it to the bank, who were brilliant and they cancelled my card straight away and refunded the money within 24 hours.

However, since then I've received two letters. The first is a name slightly similar to mine from an accident repair company about an accident on 16 Jan, and the second is addressed to a name similar to mine again but from Aviva about an accident on 14th Jan and reported by a third party.

I have no idea about any accidents. Do you think I'm a victim of identity fraud? Putting everything together I'm wondering if it's all connected to the Lush hacking and I'm really worried. I've no idea what to do!

postingalwaysposting

m4ndy1966 wrote: »

What other sites other than O2 have been used to fraudulently access accounts?

Xbox live accounts and points, so microsoft, has been mentioned on the Lush forums a few times, although these were french customers. To be honest if it were me I would look at every transactuion and question anything you feel may be odd. If its a payment to something you would never use, other mobile provider, gambling sites etc then question it even if it turns out to be your own transaction.

shikoku

hallmark wrote: »

IIUC correctly it may depend on the card. If it was a debit card then refunds should work even if you are being issued a new card with a different number. However refunds to c/cards who's numbers have changed might fail.

Yes it was a debit card, good point

Cheapchick_2

oakhouse13 wrote: »

The reference to the site being shut between Xmas Day and New Year - is that true? Weren't there reports on Grabbit over that period of people making purchases on the website?

I remember the site being down, as I was looking to see if they had any sale stuff online. I think there was some message as if it were technical problem so I kept checking back an then decided not to bother. I really feel for those who have been victims of card fraud as its happened to me twice before (not through Lush), and I know how much a worry and hassle it is. For Lush to have known about this on Xmas day and then to allow people to order on their site again without making public this information is just sheer greed on their part.

Cheapchick_2

wotnext wrote: »

I received this email too. I ordered two small gifts in Nov/Dec.

On 13th of this month I discovered fraudulent use of my bank card (payments to 02, car hire etc). I reported it to the bank, who were brilliant and they cancelled my card straight away and refunded the money within 24 hours.

However, since then I've received two letters. The first is a name slightly similar to mine from an accident repair company about an accident on 16 Jan, and the second is addressed to a name similar to mine again but from Aviva about an accident on 14th Jan and reported by a third party.

I have no idea about any accidents. Do you think I'm a victim of identity fraud? Putting everything together I'm wondering if it's all connected to the Lush hacking and I'm really worried. I've no idea what to do!

I would phone the insurance companies to find out who registered in your address and when then contact the police.

SallyG

Is there any way we could have spotted that Lush online payments were open sesame/fill yer boots to hackers?
Can't check now the site's disappeared but I always look for the secure padlock doofer - I've never not seen that on a site where I'm buying online it's everywhere-
Does it mean anything really
Does using my credit card give more protection against fraud than my debit card ?- I always think because there's more cash available on my credit card than in my current account it makes more sense/cuts down the risk to use my debit card.
not keen on Paypal - something to do with reports about them not stumping up for obvious fraud???