Cash Converters HACKED exposing customer information including partial credit card details
CASH Converters has been hit by a data breach with Brits' partial credit card numbers, delivery addresses and passwords feared stolen.
The high street lender said it had passed details onto the Information Commissioner's Office following the breach.
The company is understood to have received a ransom demand for its old online shop which was shut on September 22.
It received an email from hackers claiming to have gained access to the data, but did not say when.
They threatened to release British customer and operational data unless it received money - meaning anyone who used the site before that time might be at risk.
Cash Converters said that user records may have been accessed, including personal details, purchase history and passwords.
It is working with law enforcement in the UK to investigate the data leak, and has forced a password reset for all UK webshop users.
Customers this week received a statement that read: "Although some details relating to the cyber-security breach remain confidential while Cash Converters works with the relevant authorities, we will continue to provide as much detail as possible as it becomes available.
"The current webshop site was independently and thoroughly security tested as part of its development process.
"We have no reason to believe it has any vulnerability, however additional testing is being completed to get assurance of this.
"Our customers truly are at the heart of everything we do and we are both disappointed and saddened that you have been affected. We apologise for this situation."
WHAT NEXT? Webcams, TVs and even your phone’s SCREEN: How to spot if your devices are being hacked… and the best ways to stop it
Matthias Maier, a security expert from software company Splunk said it was "clear that those individuals involved are now at a high level of risk".
"Personal details from users of the old website are at risk of being used in creative ways by the hackers to access other online accounts, adopt new identities for social platforms or targeted phishing attacks," he added.
It was not immediately clear how many customers may be affected.
more hacking stories
We pay for your stories! Do you have a story for The Sun Online news team? Email us at [email protected] or call 0207 782 4368. We pay for videos too. Click here to upload yours.'