The Register® — Biting the hand that feeds IT

Feeds

Cotton Traders mauled by hackers

Rugby apparel website rucked

Customer Success Testimonial: Recovery is Everything

Update Cotton Traders has become the latest firm to spill sensitive customer account details.

The retailer confirmed on Tuesday that payment details were exposed following an attack on its website earlier this year. Around 38,000 customers were affected by the breach, the BBC reports. Cotton Traders claims this figure is "widely inaccurate" but isn't supplying the correct figure.

Cotton Traders, a specialist clothing outfit founded by ex-England rugby stars Fran Cotton and Steve Smith, said the potential to misuse the data is low because the credit card information was encrypted. It said it notified credit card issuers of the breach and that most of the affected cards were blocked and reissued in January.

A spokeswoman explained: "I would like to reiterate that the incident took place in January 2008 and all actions to rectify the situation were completed over five months ago."

"Those involved were notified at the time and card replaced," she added.

In a statement the firm said: "Cotton Traders take any security issues very seriously.

"In January 2008 we identified a security issue. We immediately brought in Industry security experts to resolve the problem. We can confirm that our customer credit card data is encrypted on our website but if any of our customers have been a victim of fraud, they should contact their card issuer."

"Cotton Traders have recently upgraded all security on their website which has been validated by leading Industry experts," it added.

Police are investigating the case. It's unclear how malicious hackers broke into the website. ®

Ensure Ease of Recovery with Asigra’s Agentless Software

Latest Comments

Lack of Communication

As a long term customer with Cotton Traders, I am disapointed that no communication was made reference this breach of data. Consequently the details of my Card were used in April and May without my authorisation. If Cotton Tradres had informed customers of this breach, then steps could have been taken to minimise this fraud.

0
0

was

quote from main man "was now encrypted on its website". ha ha arrrrr

well at least not more than 2.3 million details......

Funny; in china some would get shot over this.

0
0

No of cards affected

I was unfortunately having to deal with a CC company yesterday, having found that some third-party had tried to pay their bank account £1800 from my account. Whilst on the phone to their investigations department, I mentioned the Cotton Traders report, and he laughed, saying that it was around 85,000 cards at his company alone.

Somebody is hiding something here - why are Cotton Traders not being forthright about the numbers involved...?

0
0

More from The Register

 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key
Microsoft borks botnet takedown in Citadel snafu
Stupid Redmond kicked over our honeypots, wail white hats
Critical Java SE update due Tuesday fixes 40 flaws
And yes, most are remotely exploitable
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving