As some of you might know I was the victim of card fraud this week and had my card used to the tune of over ?300 at the start of January. Didn't notice this until I got a recent bank statement.

Yesterday Lush Cosmetics sent out a statement by email to say their security has been compromised, and card details may have been accessed.  Any customers placing orders between 4th Oct and 20th Jan are to contact their banks.

I did indeed order from them in December, only a few days before the fraudulent payments were taken. I've spoken to my bank to update them but they say their information isn't conclusive. Lush have told them it might just be a virus, and payment details are probably safe.

I'd advise anyone who has bought anything via the Lush website recently to check their statements immediately.