Credit card details hacked from online shop

Is there anybody out there who has still not purchased anything online and know that their own credit/debit cards are still safe from cyber-space

Clearly LUSH did not follow security guidelines but still I've puchased plenty of stuff over time, though I've always thought that card details are not safe with any company because ultimately with the right knowledge and know how a system of any sort could be hacked. Admittedly, a lot can be done to prevent it and most shops will do what they can to stop it but I can't see that any shop can guarantee that it won't happen and nothing will ever stop it. IMHO criminals/hackers will get more and more sophisticated and it's just something we'll learn to live with (unfortunately!)

I just console myself with the fact that ultimately I'll get my money back if it's been hacked, just the hassle to deal with! Though ultimately we all pay

__________________
Web: mrb design
Twitter: mrbdesign

Forum Rules and FAQ's at a glance

Be interesting to know a) which Payment Gateway they were using, b) if they had performed PCI self-assessment and c) if yes then which QSA approved them.

Granted they may have followed correct procedure in terms of using a PCI accredited gateway but surely the assessment for level 4 of the PCI would have been performed for an organisation such as this, in which case scans should have been carried out.

__________________
Payment Gateway - PCI accredited Payment Processing from just £10 per month inc. 300 transactions (10p per transaction thereafter).
Ecom or MOTO or both for just £2 per month extra.

I don't think its any different these days than giving your card details over the phone.

I always go with gut instinct, if it looks like an amateur or hobby site, regardless of SSL etc, then I stay away, unless I really need whatever it is and they have a paypal option, in which case I'll buy via that.

The last time I got stung was using a booking engine for a 5 star hotel, which turned out to be a rogue employee nicking card details. So you can be on your guard and use common sense, but there's always going to be an opportunist when it comes to handing over sensitive information

__________________
cheers Steve
Forum Admin - teaboy and general gofer...

Forum Rules and FAQ's at a glance | Find me on Google+ | or even Facebook!

My Local Services - The UK and US Online Business Directory | JobsVitae - Recruitment Help and CV Creation

If you're here to spam, then expect a ban

Yes, agree with you on that.

__________________
Web: mrb design
Twitter: mrbdesign

Forum Rules and FAQ's at a glance

Currently I'm only using Paypal and Google checkout for my merchants. Although I've been taking measures to be PCI DSS Complaint... it does worry you.

Been looking into Barclays ePDQ CPI which they host all the content for paying... so liability is on them.

Obviously I'm going for normal Barclays business account and using eWay.

__________________
NUX Gaming | Game Servers | COD4 Game Servers
Low Pings, low cost. Great, quality service!