Lush Australia and New Zealand websites have been hacked. Hackers gained access to the company’s UK website and stole customers’ credit card details. Customers advised to contact their bank to discuss if canceling their credit cards is advisable. It’s unknown whether the attacker(s) compromised all the sites in the same way – the statement only says that the UK site and the Australian and NZ sites are not connected. The company has not confirmed whether the attack was carried out in the UK or Australia.
Source: https://thehackernews.com/2011/02/lush-takes-down-two-regional-sites.html