Vision Direct says a hack attack has exposed thousands of its customers' personal data including payment card numbers, expiry dates and CVV codes. The contact lens retailer said anyone who had entered their details into its sitebetween 3 and 8 November could be affected. It added that it had identified 16,300 people as being at risk. It said a fake Google Analytics script placed within its websites' code was the apparent cause. The company's UK site was involved as well as local versions for Ireland, the Netherlands, France, Spain, Italy and Belgium. Under investigation

A spokeswoman for Vision Direct told the BBC that 6,600 customers were believed to have had details including financial data compromised, while a further 9,700 people had had personal data but not card details exposed. "This particular breach is known as Shoplift and was already known to our technology team, who installed a patch provided by our web platform provider to prevent this form of malware," she added. "Unfortunately, this current incident appears to be a derivative against which the patch proved ineffective. We are continuing to investigate the breach and have made numerous steps to ensure this does not happen again."

Source: