lush.co.uk - what a mess !

domainseller200 · Jan 21, 2011

http://www.lush.co.uk/

"Our website has been the victim of hackers.

24 hour security monitoring has shown us that we are still being targeted and there are continuing attempts to re-enter.

We refuse to put our customers at risk of another entry - so have decided to completely retire this version of our website.

For complete ease of mind, we would like all customers that placed ONLINE orders with us between 4th Oct 2010 and today, 20th Jan 2011, to contact their banks for advice as their card details may have been compromised.

We Believe hacking is a serious crime which steals large amounts of money and disrupts the lives of cardholders.

We Believe that hacking erodes the trust between businesses and their customers and creates a climate of fear around online ordering.

We Believe in working with police and banks to do all we can to bring this branch of organised crime to justice."

Unbelievable !!

aaclapham · Jan 21, 2011

You would think their development company would apply any server patches and have the site back up in hours.

JMOT · Jan 21, 2011

judging by some of the comments on youtube etc looks like that had their customer credit card details stolen... might explain why they relaunching with just paypal asap...

fish · Jan 21, 2011

Many a small online business are the target of hackers these days as all the big online traders have their security & compliance tightened right down making it difficult ( and not worth the time/effort) for oc gangs/hackers.

Following the even the basic guidelines of the PCI DSS would have helped them.

awgthomas · Jan 21, 2011

aaclapham said:
You would think their development company would apply any server patches and have the site back up in hours.

TBH, I think they have completely lost confidence in their dev company !!

Wonder if they adhered to https://www.pcisecuritystandards.org/

I'm guessing not if they have accessed credit cards numbers !!