Lisa I'm sorry this is/may be in the wrong place and people really need to read this.

I've just got an email from Lush and as the banda ladies know I bought my secret santa gift from their website then shortly after I said that my card details had been stolen which caused alot of hassle over Christmas and I thought it was due to the Amazon scam! It wasn't it was due to Lush! This is the email I've only just got:-

Dear Customer
We would like to draw your attention to the statement below, as we believe you placed an order with us during the affected period. We are keen for customers not to have their credit cards used fraudulently, so urge you to contact your bank.
Thank you for your past custom, we really appreciate all the support you give - especially at this time whilst we are under attack.
Everyone at Lush xx
********************************************************************************
Our website has been the victim of hackers.
24 hour security monitoring has shown us that we are still being targeted and there are continuing attempts to re-enter.
We refuse to put our customers at risk of another entry - so have decided to completely retire this version of our website.
For complete ease of mind, we would like all customers that placed ONLINE orders with us between 4th Oct 2010 and today, 20th Jan 2011, to contact their banks for advice as their card details may have been compromised.
We Believe hacking is a serious crime which steals large amounts of money and disrupts the lives of cardholders.
We Believe that hacking erodes the trust between businesses and their customers and creates a climate of fear around online ordering.
We Believe in working with police and banks to do all we can to bring this branch of organised crime to justice.
A completely separate, temporary website will be launched in a few days - initially taking PayPal payments only.
Meanwhile we would be delighted to serve you in our shops or take your order at our Mail Order Phone Room. Both of which have not been affected by this crisis since the credit card terminals are directly linked to the banks only and are not internet based.
We would like to thank all our customers for standing shoulder to shoulder with us whilst we have shared being victims of this crime.
Mail Order Phones are open:
Mon - Fri 8am to 9pm
Sat 9am to 5pm
Sun 10am to 4pm
Tel: 01202 668545

And a similar message is on their website. www.lush.co.uk

SO if you have bought stuff from Lush online since October 4th you need to check your bank statements ASAP.

Thanks for this hun. I'll make into a sticky so everyone can see x

That's really scary! I haven't ordered things but I know a few girls at work have.
Thanks for this!

oh heck

Scumbags!
Did you get the money back dilly?

Luckily I didn't have much they could take, the bank told me how much they had tried to take (just under £225) but I never have that much in my account. What I do is on child tax credit day I transfer all the money into my savers then transfer back bits and bobs back into my current account each time I buy stuff online or each time I know there is a direct debit coming out. The bank said that habit was a good one to have and that's why no money was taken.

Thank-you for making it a sticky.
I've also posted on various groups on Facebook xxxx

Omg! bastards

just seen this dilly, i feel awful when it was my gift too, glad they didnt manage to get hold of your money xx

Don't feel awful hun, I had to order hubbys SS too - it was for the secretary. Fraud can happen to anyone xxxxxxxxxxxx