Nobody needs to shame Lyca, they have a very long Wikipedia page that does that for them…. You know, just some money laundering and tax evasion in 6 countries give or take
MarkJ posted a comment which was a statement from Lyca, as they aren’t replying to their customers
If anybody you should know that Lyca, if breached, can issue the advice to their customers to cancel their cards and save them a lot hassle
Lyca has shown many times they have zero respect for the law
Mark had a statement from them (likely email or message) stating this, it wasn’t publicly shared by Lyca, just between the two which mark shared. There’s a difference.
You’ve spent the best of a week, maybe less, going on about it.
You realise that if nobody talked about it, Lyca would enjoy never having this acknowledged?
Nearly everyone who also experienced this did before i posted about it
They are clearly processing them in batches, since there were a few after. If you were a customer im sure you’ll be affected soon, followed by all the articles and the ICO fine
And yeah sorry, I am a little obsessed with it. Part of the job though, you get to laugh and enjoy the sh*tsbow from an outsider perspective. This is close to the TalkTalk breach, but if card information was leaked it will probably have a much worse impact
Hey don’t get me wrong, I’d rather they wernt breached. Clearly their last one wasn’t enough to keep me away from their good deals
Assuming they weren’t for this message, it’s better for everyone involved if they atleast answer all the complaints about it people spend the time to send them
Just imagine if they did actually have another breach (I don’t see how their could be anymore proof without them confirming it), and millions still trust them with their calls, texts and any other data that goes through them
They’re straight up ignoring my complaint emails while replying on trustpilot asking me to email them when I already have with a lot of details
This “breach” seemed to have happened at the same time as they moved from Wordpress to a new NextJS based site. Putting my tinfoil hat on im going to take a guess a very cheap outsourced dev was tasked with migrating a live, unencrypted version of their database to a new system, and couldn’t resist the temptation
Had been used with Lyca back in August, and since then, Lyca had its own virtual card applied to it.
However, I was at an outdoor event in Wrexham yesterday and used the card at 4 vendors there. Never any fraud prior, so I’m more sus about yesterday than Lyca tbh.
Only joking though, you were right to be suspicious as no matter how much I know I only used that card at Lyca, you could never know that and i’ve acted the same way a lot before. But i’m pretty sure you know you were careful with that card, although it’s not as obvious to point the finger, I was pretty sure when I realised it was my virtual card named “lyca”
rangenine.com has existed since 2013ish, pretty sure their a legit retailer. just an easy target to perform active checks and grab the result i’d imagine
though I was incorrect, they aren’t running on shopify. seems like a wordpress site
you could head onto live chat and ask what details they had about you?
Because the event had multiple stalls with their own card machines, and the last Lyca payment on that card was July 2023, blocked for August 2023.
Then virtual card Oct, Nov, Dec, Jan on a new account.
Afaik I can’t access the old Lyca account from mid 2023, assuming it no longer exists as they’re quick to end sims with non payment.
So yes, more skeptical about a merchant from yesterday, or just unlucky in number being generated.
Not going to waste my time with this.
I haven’t used the Ultra card much online I don’t think; as Apple generally has Gold Metal saved details in safari etc, or it’s pay by Apple Pay which masks it anyway.
I’d say square reader machines but I don’t particularly pay attention.
Because I downgrade Ultra to free, if I want another Ultra card I’d have to sign up again and at £45 with a £45 break fee, I’m not paying £90 for a card
What would they have put for the billing address though, since it’s an online store? Wouldn’t a random postcode flag up? I know when I used my old postcode my entire account got blocked for 2 days
If I were you I’d throw up a quick post on your local FB group asking if anyone else had one, same I did with Lyca when I had a suspicion and quickly found others. If you do you can put it to rest