Credit card numbers stolen from Chain Reaction Cycles

Just sent an invoice, the second it gets paid it's going straight on Red. That's a few weeks of work for nothing right there.

Just sent an invoice

to me?

hah no, to employers. you still owe me some dorrah though, which I mustn't let slip my mind.

yea i know. ive got it written down on my list!

hm, nothing yet. does this affect everyone who ever bought from them or just recent transactions?

thanks for the heads up!

recent transactions I think, around the first week of March.

I also got my card frozen after someone decided to try and buy a grand of stuff from John Lewis and £400 of office supplies, happened in the same time as others on here and about a week after I bought some stuff not using paypal from them. Well, I guess that explains it. Thankfully only a tenner was taken out and is being refunded,

has anyone spoken to CRC about this? Just had a look on their site and they say nothing about it

As a customer it'd be nice to get an email from them asking me to please double check my statements?

That would explain how my card got hit for the 2nd time. Funny I was trying to figure out how it happened, and I didnt expect it to be Chainreaction. I'm going to use Paypal with them from now on!

has anyone spoken to CRC about this? Just had a look on their site and they say nothing about it

As a customer it'd be nice to get an email from them asking me to please double check my statements?

Apparently they are keeping quiet. It seems people have only found out from the rumours spreading around the various forums.

strange way to handle it i reckon. I'd appreciate if an online shop would act on something like this, and try to help rather then just lying low and hope as few as possible find out

I got hit by this big time, it came up as "card services" on my statement. Reported it to fraud services and bank has refunded the money.

strange way to handle it i reckon. I'd appreciate if an online shop would act on something like this, and try to help rather then just lying low and hope as few as possible find out

Yes. I would also expect an email apologising and warning me to look out for suspicious transactions.

There's a big thread on this on another forum I use. Seems plently of people have been hit, some worse than others but the 2 x £15 O2 top ups comes up quite frequently. CRC even came on to say this:

"......Hi Folks

Just want to give you an update as you may have missed our earlier statements.

What do we know?
We know that some of our customers have experienced credit card fraud after placing an order with CRC.

When did we find out?
Senior staff in CRC where alerted to forum comments on Sunday 6th of March. We immediately began our investigations enabling to release information via community forums on Wednesday the 9th, acknowledging that we were actively investigating the situation.

How big is the problem?
So far, we have been contacted by customers who purchased in February and the beginning of March. The contacts we have had both directly and via forums equates to under 0.1% of on-line orders placed In that same time period. However, we understand that for those effected this is of great concern and as we take our customer's security extremely seriously we are taking all the steps we can to understand what has happened.

What steps have we taken?
CRC have employed one of the UKs leading internet security companies to carry out an immediate and full forensic investigation into CRCs infrastructure. This investigation has so far uncovered no evidence of any breach. We are also fully engaged with our card processing companies and the card schemes. This investigation is still underway.

Card Re-issues
Purely as a precaution, Card Issuers may make the decision to reissue new cards to recent CRC customers. If your card is reissued it does not mean that your details have been compromised but the banks take an ultra cautious view on this as the cost of re-issuing a card is much smaller than resolving any potential issue in the future.

When will CRC have more information?
We are working round the clock to get an understanding of what has happened; as we get greater understanding we will continue to keep you up to date and intend to issue a further updates over the next week or so.

Can you order safely?
So far the investigation has uncovered no evidence of any breach but if you want to order on CRC without CRC being in contact with your credit card details then choose Pay by PayPal and checkout using your credit card via the PayPal express checkout.

Please contact us directly
We want people who have been directly affected to contact us so we can personally update you by email. Please contact us on +44 (0)2893343758 between 9am – 5.30pm or email enquiries@chainreactioncycles.com and we will be glad to help you.

Thanks again for your patience and support

Michael Cowan
CRC Senior Management......"

They will issue a statement if they find a compromise.
It's all over the forums now though so it's a bit late.

kind of glad now that I paid with paypal last time I used CRC now

Just had a look through my statement and there's a payment I can't for the life of me think what it's for.
It's for "CO-OP GROUP 109885" and £54. All the online shops I use have the name, and all ebay things use paypal. I tried googling but I can't find out what it's for.
It was on the 7th so I'm inclined to think it might be fraud. If I phone up barclays fraud guys will they be able to tell me more info?

Just had a look through my statement and there's a payment I can't for the life of me think what it's for.
It's for "CO-OP GROUP 109885" and £54. All the online shops I use have the name, and all ebay things use paypal. I tried googling but I can't find out what it's for.
It was on the 7th so I'm inclined to think it might be fraud. If I phone up barclays fraud guys will they be able to tell me more info?

I had something like that on a statement, called the bank, spoke to fraud, got it stopped and refunded. Turns out my car insurance company had changed their name. By the time they got round to noticing I had stopped paying I was uninsured for about 3 months.

I'll get on the phone to them tomorrow.

This happened to me. I was supposed to be getting my groceries delivered yesterday but the person who picked the order phoned me up saying my debit card had been declined. I phoned my bank, they explained why. Fraudulent transactions, £15 O2 top up in addition to other stuff. Money refunded straight away but it's a pain in the arse as it'll be 7-10 days til I get a new card, and it's the only one I have.

Make sure you have two credit/debit cards in case something like this happens, people!

The funny thing is that I was blaming Wiggle, as they've had this problem before. I rarely order from Wiggle anyway but did buy something from them last month. Never expected this from CRC

wiggle > crc

Yeah I got took for £1100 it was used to pay Someones Capital One Credit Card.

Bank Blocked my card and sent a new one but handily changed the PIN Number without telling me....that was fun thought i'd been tucked up on the new card.....

Fraud Dept looking into it have to wait to get money refunded / cleared form my account.

I got stung by this too, £30 to O2 and something for WH Smith as well. Bank called me straight away though so the money never went out. How do the banks detect this so quickly? I was muy impressado.

As some have mentioned already, Wiggle had a similar incident to this a couple of years ago. I didn't get caught out, but decided then to never store my card details with any online retailer. I tend to use paypal these days as that gives you a little extra protection.

CRC really ought to be a bit more on the ball about this. Adopting the ostrich approach is a surefire recipe to piss people off.