lush.co.uk - what a mess !

[domainseller200]

http://www.lush.co.uk/

"Our website has been the victim of hackers.

24 hour security monitoring has shown us that we are still being targeted and there are continuing attempts to re-enter.

We refuse to put our customers at risk of another entry - so have decided to completely retire this version of our website.

For complete ease of mind, we would like all customers that placed ONLINE orders with us between 4th Oct 2010 and today, 20th Jan 2011, to contact their banks for advice as their card details may have been compromised.

We Believe hacking is a serious crime which steals large amounts of money and disrupts the lives of cardholders.

We Believe that hacking erodes the trust between businesses and their customers and creates a climate of fear around online ordering.

We Believe in working with police and banks to do all we can to bring this branch of organised crime to justice."

Unbelievable !!

 

[aaclapham]

You would think their development company would apply any server patches and have the site back up in hours.

 

[JMOT]

judging by some of the comments on youtube etc looks like that had their customer credit card details stolen... might explain why they relaunching with just paypal asap...

 

[fish]

Many a small online business are the target of hackers these days as all the big online traders have their security & compliance tightened right down making it difficult ( and not worth the time/effort) for oc gangs/hackers.

Following the even the basic guidelines of the PCI DSS would have helped them.

 

[awgthomas]

You would think their development company would apply any server patches and have the site back up in hours.

TBH, I think they have completely lost confidence in their dev company !!

Wonder if they adhered to https://www.pcisecuritystandards.org/

I'm guessing not if they have accessed credit cards numbers !!

 

[aZooZaaZooZa is verified member.]

They may have a cash flow problem. I always think of a worst-case scenario. This doesn't ring quite right to me. Just my personal opinion.