Hannants hacked

[Guest]

This will hit them very hard as they supply many shops over the UK,loosing customer details is a big no no.

Tony..

[Guest]

This is worrying as I believe you are correct in saying that this could be all cc transactions & not just those on the website, from reading posts on some other forums this does not to appear to be a breach of hannants security but that of the company that deals with their cc transactions & other companies have also been affected.

Many people are being critical of hannants but I believe we should be grateful that they have taken the action they have.

so far I have been lucky but I will be cancelling my card today as a precaution.

[Guest]

Many people are being critical of hannants but I believe we should be grateful that they have taken the action they have.so far I have been lucky but I will be cancelling my card today as a precaution.

Sad to say that it appears that Hannants did store all the cards on their website. If you look at their website there is a front page saying that the website is closed and that you should report all suspicious activity on your account, whats more is that they state that all card details have now been wiped from the website:goodnews:

It would appear from what has been written that they were keeping details of the card on the site, I for one, bought something recently from them and the last four figures from my card came up and I was asked to confirm then submit. If this has been the case then THEY have made a huge error with this one:shoot:

I am now with John and will not be using them unless they are at Duxford and I preorder for collection or a visit to Colindale, however as he has also quite rightly pointed out the kits and accessories they sell are not unique to them ...................:clap3:

What is a p**ser is that I am now without means to purchase anything because my card has been compromised and a 32 mile round trip to the closest branch of my bank with photo ID and details of my account and a cheque book is really not ideal. This also means that I cannot update my stash, perhaps a blessing in disguise:cheeseygrin:

Andy

[Guest]

You may want to change the topic title as it appears that Hannant's have not been hacked,rather that the clearing bank they use has been hacked,so anyone who has made purchases in the past few days have been affected.

I recieved this E-Mail from Hannants;

Dear CustomerWe are very sorry to have to tell you that a number of customers who have used our website have had their card details stolen and used by criminals....

removed already posted

[John]

You may want to change the topic title as it appears that Hannant's have not been hacked,rather that the clearing bank they use has been hacked,so anyone who has made purchases in the past few days have been affected.I recieved this E-Mail from Hannants;

If that is the case then it is much worse as it does mean that all payments made to them, website, phone or even in their shops could have been compromised

[Guest]

If that is the case then it is much worse as it does mean that all payments made to them, website, phone or even in their shops could have been compromised

What does bring this home, is that I will be very, very, very concerned about leaving my card details without the secure server such as world pay or Paypal! This by the way is not a Hannants witch hunt, although it may appear this way to one or two, but I refer to my earler post about them clearing all cards from their server, which is clearly posted on their web page.

A sad state of affairs ....................

Andy

[Guest]

Even tho I havent brought from Hannants as I go through a 3rd party to obtain items,like John I would be very worried now as if they have your credit number they also have all your credit details, account number,address and such like. Identity fraud is big business in the criminal world.

Tony..

[Guest]

Sent an email to hannants this morning as to whether this was limited to web sales only, they were very quick to respond & the response was quite unnerving.

All sales go through the website, check your statements.

[Guest]

You may want to read the thread here on Britmodeller;

Clearing bank hacked - card details stolen - Britmodeller.com

as well as the one on ARC;

credit cards on Hannants compromised - ARC Air Discussion Forums

As it does appear the 'problem' is widespread,not just here in the UK,but the US & other countries.Even tho I have a debit card,I always use a top up credit card for online shopping.Safest way IMHO.

This is the one I use & it's free.

O2 Money

[stona]

I just got a call from my credit card company. My card details have been used fraudulently. I'm obviously not liable or out of pocket but it is a bit unnerving and also inconvenient as that credit caed is stopped and I'll have to wait for another one.

Not very adventurous crooks,they tried to buy something fot 150 quid from Robert Dyas!

I'm nipping out to get some cash.

Cheers

Steve

[Guest]

You may want to read the thread here on Britmodeller;Clearing bank hacked - card details stolen - Britmodeller.com

as well as the one on ARC;

credit cards on Hannants compromised - ARC Air Discussion Forums

As it does appear the 'problem' is widespread,not just here in the UK,but the US & other countries.Even tho I have a debit card,I always use a top up credit card for online shopping.Safest way IMHO.

This is the one I use & it's free.

O2 Money

Looks as if I have been hit for a £20.00 charge to 02 prepay slough.gbr which made no sense to me until I read the above, have advised my card company.

[Guest]

Looks as if I have been hit for a £20.00 charge to 02 prepay slough.gbr which made no sense to me until I read the above, have advised my card company.

I'm glad I posted it then!looks like they were about to go for the jugular after the £20 one,although it does seem in the threads that O2 have gotten a lot of transactions...I wonder if the is possibly any value in that the perps would have to have a O2 number to buy top up's...Hopefully they've been stoopid enough to provide real details to O2...

[John]

Just got an update

Dear Customer,Investigations are still on-going but so far no problem area or trace of illegal entry can be found anywhere. How the card numbers were taken is still a mystery. Two firms are still looking at everything and we hope to have their reports in soon. For now we are still not prepared to fully re-open the website.

We have PARTIALLY re-opened the website. We have done this so you can check that we are telling the truth that the card details have been removed and so that you can use all the other parts of the site. We suggest that while you are logged in you also check any items that are on back order and/or in your cart and adjust as required.

Currently you cannot enter new card details at this time or send orders to us but most other facilities are still operating as usual.

We have temporarily stopped sending out back orders just in case sending the data that goes with ordering is where the problem is. We have been told that it is encrypted everywhere and is not a problem area so now we do not think it is but we need to be certain.

TELFORD SHOW ORDERS. To send us an order for collection at the show please add a Collect from show address with your name on as usual, add what you want to buy to your cart as before BUT then email us to say it is there in your cart. We will then download it and have it ready for collection and payment at the show. You do not pay until you collect so we do not need any payment now.

MAILORDERS. WE CAN NOW ACCEPT ORDERS THIS WAY... Please put your order in the cart as normal then TELEPHONE or FAX us with your card details. We will then download your order and attach the card details to the order. We will then be able to process your order. Our email is not secure so we cannot recommend you send your card details that way.

Please be aware that the cart only 'remembers' items if they are actually saved in the cart. Items in the Quick Order only do not get saved.

We will email more information as soon as we can. Quite a few customers have told us that they are on the emailing (Hot News) list but have not received an email from us. We think this is because they are being stopped as spam. Mostly the customers are with Hotmail, Yahoo, AOL and of course BT. If you can pass our emails to any of your modelling friends please do.

Everyone at Hannants would like to say a massive 'thank you' for the emails, and phone calls of support, help and encouragement you have sent us. With the exception of about 8 people your support has been fantastic.

Congratulations should also go to the worlds banking system who seem to have spotted and stopped the majority of the charges before they got to the customer.

As has already been said the big plus was that they warned their customers as soon as they identified a problem, this email says you can fax your credit card details to them, that is probably the most unsecure way possible. :redface:

[Guest]

I'm glad I posted it then!looks like they were about to go for the jugular after the £20 one,although it does seem in the threads that O2 have gotten a lot of transactions...I wonder if the is possibly any value in that the perps would have to have a O2 number to buy top up's...Hopefully they've been stoopid enough to provide real details to O2...

Hi Merv, thanks for your help, have cancelled my card and awaiting a new one - a real pain, but I will get my money back. Thanks again Cheers Derek

[Guest]

I think considering the effort Hannants have gone to in order to warn customers and keep them informed, they deserve our support more than ever!

We are in difficult times and the internet has provided a great opportunity to spread business around the globe (my own employer is just about to launch an e-commerce site). The means by which payments are taken is NEVER going to be foolproof. As soon as a secure system is created by one person, another hacks it, that's just the way it is sadly.

Our only really secure way to trade is with physical money at our local model shop........trouble is, we want stuff that isn't available from there so we have to go online.