Nem találtam jobb topicot, ezért ide rakom a levelet, amit most kaptam a Hannants-tól.
Röviden arról van szó, hogy feltörték az oldalukat, és hackerek ellopták a kártyaszámokat. Ezért aki gyanús forgalmat lát a kártyáján, lépjen kapcsolatba a bankjával.
Egyelőre nem tudják, milyen módon jutottak be a rendszerükbe.
Úgy tűnik, arra a szerverre, ahol a kártyaszámok és a lejárati idők voltak, oda nem jutottak be. A kártyák CVV számai nem voltak letárolva a szerverükön.
Valószínűleg azokat a vevőket érinti, akik kb. szeptember eleje óta rendeltek tőlük.
Már felvették a kapcsolatot kb 40 vevőjükkel, de nem tudják pontosan hány vevőt érint a dolog. Kérik, hogy aki tud róla, hogy a kártyájáról pénzt emeltek le illetéktelenek, értesítsék őket. Kis összegeket kell nézni, több országból, különböző devizákban.
Addíg, amíg ki nem derítik, hogyan törtek be hozzájuk, bezárták a weboldalt, és kitöröltek mindenhonnan minden bankkártya adatot.
Miért nem használnak Paypalt? Azért mert amikor indult a webshop, akkor a Paypallal sok gondjuk volt. Nagyon lassan érkezett meg hozzájuk a pénz, és a költsége is háromszorosa volt egy normál bankkártyás tranzakciónak. A dolgok azóta változtak, és most azon vannak, hogy be tudják vezetni a rendszerükben a Paypal fizetési lehetőséget.
"
We are very sorry to have to tell you that a number of customers who have used our website have had their card details stolen and used by criminals.
ALL CUSTOMERS THAT HAVE ENTERED CARD NUMBERS ON OUR NEW WEBSITE PLEASE CHECK YOUR ACCOUNTS FOR SUSPICIOUS CHARGES OR ATTEMPTED CHARGES.
If you see any please contact your company that issued your card.
At the moment no one is sure how this has happened. There are several internet security firms investigating everything and we will keep you all updated as soon as we can.
There is no sign of any intrusion into the server where the card number and expiry date information that we keep is encrypted*. The CVV number is not stored.
After looking at the information we have received we think this mainly affects some customers who have sent us an order in the last 2 weeks though there are 3 from September.
We have been contacted by about 40 customers so far but are not sure how many others have had their cards compromised but have not told us yet. If you know your card has been compromised PLEASE tell us. Please send us as much information as you can as soon as you can. We need as much information as soon as possible.
Please look out for small 'insignificant' test charges of under $5.00 followed by larger charges of varying amounts. Charges have originated from different countries and in different currencies.
Until we have found out what has caused this problem and it has been fixed we have closed the website. None of the experts can find any problems with it but until the problem is resolved we prefer not to take any risks.
We have deleted ALL card numbers from the website database. We are aware that a few of you wanted access so you could delete your details but we have done this for everyone.
Paypal. We have been asked why we do not accept it. There are 2 reasons. Firstly when we started work on the new website 4 (four) years ago we could not get it to work with the fully stock controlled warehouse that we wanted to run. We did some trials but it took too long for payments arrive in our bank account which would seriously have delayed the despatch of orders. Things have now improved. Secondly it was too expensive. 3 times the cost of handling Visa and Mastercard. All our payments are now handled by Sage pay, a large British firm. Recently they have started working with Paypal and our website designers had been doing some work to incorporate it into the website. We are going to speed up the work on this and try to get it incorporated quicker.
We will re-open the website as soon as we can but will not be rushing into it.
Thank you for your help and understanding.
ALL CUSTOMERS THAT HAVE ENTERED CARD NUMBERS ON OUR NEW WEBSITE PLEASE CHECK YOUR ACCOUNTS FOR SUSPICIOUS CHARGES OR ATTEMPTED CHARGES.
If you see any please contact your company that issued your card.
"
