Time and Motion in Scale Format

Just doing things my way.

Tuesday, 2 November 2010

Hannants Web Site Hacked.Customer details stolen

A few days ago following a refused transaction with my bank and the revelation by Hannants of a breach in their web site.I have received the following email.
Dear Customer

We are very sorry to have to tell you that a number of customers who have used 
our website have had their card details stolen and used by criminals.

ALL CUSTOMERS THAT HAVE ENTERED CARD NUMBERS ON OUR NEW WEBSITE PLEASE CHECK 
YOUR ACCOUNTS FOR SUSPICIOUS CHARGES OR ATTEMPTED CHARGES. 
If you see any please contact your company that issued your card.

At the moment no one is sure how this has happened. There are several internet 
security firms investigating everything and we will keep you all updated as soon 
as we can. 

There is no sign of any intrusion into the server where the card number and 
expiry date information that we keep is encrypted*. The CVV number is not 
stored.

After looking at the information we have received we think this mainly affects 
some customers who have sent us an order in the last 2 weeks though there are 3 
from September.

We have been contacted by about 40 customers so far but are not sure how many 
others have had their cards compromised but have not told us yet. If you know 
your card has been compromised PLEASE tell us. Please send us as much 
information as you can as soon as you can. We need as much information as soon 
as possible.



Please look out for small 'insignificant' test charges of under $5.00 followed 
by larger charges of varying amounts. Charges have originated from different 
countries and in different currencies. 


Until we have found out what has caused this problem and it has been fixed we 
have closed the website. None of the experts can find any problems with it but 
until the problem is resolved we prefer not to take any risks.

We have deleted ALL card numbers from the website database. We are aware that a 
few of you wanted access so you could delete your details but we have done this 
for everyone.

Paypal. We have been asked why we do not accept it. There are 2 reasons. Firstly 
when we started work on the new website 4 (four) years ago we could not get it 
to work with the fully stock controlled warehouse that we wanted to run. We did 
some trials but it took too long for payments arrive in our bank account which 
would seriously have delayed the despatch of orders. Things have now improved. 
Secondly it was too expensive. 3 times the cost of handling Visa and Mastercard. 
All our payments are now handled by Sage pay, a large British firm. Recently 
they have started working with Paypal and our website designers had been doing 
some work to incorporate it into the website. We are going to speed up the work 
on this and try to get it incorporated quicker.

We will re-open the website as soon as we can but will not be rushing into it.

Thank you for your help and understanding.

ALL CUSTOMERS THAT HAVE ENTERED CARD NUMBERS ON OUR NEW WEBSITE PLEASE CHECK 
YOUR ACCOUNTS FOR SUSPICIOUS CHARGES OR ATTEMPTED CHARGES. 
If you see any please contact your company that issued your card.



* This data is stored so that customers do not have to enter it each time they 
order and so that we can run a back order service.



If you want to use the Hot News as an HTML for your own website you can convert 
it by using this link http://website101.com/cgi-bin/t2h/Mt2h.cgi


-------------------------------------------------------------------------------------------------------------------------------------------------------------------
Customers in the European Union (EU) will be charged the first price. Customers 
outside the European Union (EU)
will be charged the 2nd, usually lower, price. There is no tax on books. 
All prices shown are United Kingdom (UK) retail prices in Pound Sterling (GBP).
-------------------------------------------------------------------------------------------------------------------------------------------------------------------

To UNSUBSCRIBE or change the email address you receive this newsletter at or 
remove defunct emails address's
you can use this link http://www.hannants.co.uk/mailinglist/ 

If this email to stops being received it is either because it has bounced back 
to us as undeliverable 6 times and 
automatically been removed from our emailing list OR it is being stopped as Spam 
by your ISP. Please check by 
re-subscribing then either re-subscribe OR speak to your service provider and 
ask them to allow our emails to 
be delivered to you. If you are with BT is very likely to happen. We recommend 
using non BT email address
-------------------------------------------------------------------------------------------------------------------------------------------------------------------


-------------------------------------------------------------------------------------------------------------------------------------------------------------------
H.G.Hannant Ltd, Harbour Road, Oulton Broad, Lowestoft, Suffolk, NR32 3LZ, 
England.
(This is our headquarters and where mailorders are despatched from)
Open from 09.00 to 17.30 Monday to Saturday.
Phone: 00 44 (0)1502 517444 (8 lines) 0845 130 72 48 FREE CALL!


Cut and Paste these co-ordinates into Google Earth  5228'36.58"N   142'58.47"E

Email: sales@hannants.co.uk Web Site: http://www.hannants.co.uk/


Hannants London retail shop, Unit 2, Hurricane Industrial Estate, Avion 
Crescent, 
Grahame Park Way, Colindale, London, NW9 5QW, England.

Cut and Paste these co-ordinates into Google Earth 51 36'02.43" N 0 14'18.25" W

Telephone 0208 205 6697
E-mail colindale@hannants.co.uk 
Please contact Colindale direct to check availability in the shop or arrange 
special orders to be collected from there.

Closest underground station is still Colindale on the Northern Line some 30 
minutes from the center of London. Just 
turn left as you leave the station and walk for about 5 minutes just past the 
RAF Museum. Alternatively take the 
303 bus which drops you outside the Museum. The underground ticket covers the 
fare cost at the time of writing. 
For motorists it is near the end of both the M1 and A1, about ten miles inside 
the M25 and has ample free parking.
Follow brown road signs to the RAF Museum. 

Opening hours: Thursday and Friday 10.00am to 7.00pm. Monday, Tuesday, Wednesday 
and Saturday 09.30am to 5.00pm. 
-------------------------------------------------------------------------------------------------------------------------------------------------------------------
I have taken the liberty to call David Hannat direct to ask for an explanation.David has informed me that he has two teams working on trying to find out where the problems has arisen
I would urge you all that have accounts with Hannants to cancel your bank cards and order new ones as i have done.A inconvienience i know.But better to be safe than very sorry.In my instance an attempt was made to the tune of £1000.

No comments:

Post a Comment