Lush falls victim to computer hackers
Bank details of customers at risk
Ethical cosmetics brand Lush has revealed its website has been the victim of hackers and has warned all customers who placed online orders between 4 October 2010 and 20 January 2011 to contact their banks as their card details may have been compromised.
A statement issued via www.lush.co.uk explains: “24 hour security monitoring has shown us that we are still being targeted and there are continuing attempts to re-enter. We refuse to put our customers at risk of another entry so have decided to completely retire this version of our website.”
The company plans to set up a separate, temporary website in a few days, which will initially take PayPal payments only and has confirmed that it will continue to take mail order requests via its phone room.
Lush has responded to the situation with humour in the form of a personal message to the hacker stating: “If you are reading this, our web team would like to say that your talents are formidable. We would like to offer you a job – were it not for the fact that your morals are clearly not compatible with ours or our customers.”
It has also posted a link to a You Tube viral clip featuring dancing lemmings ‘to try to share a smile’.