I've just come across this (apologies if it's old news, I'm often behind the times) but if you ordered anything via Lush's website over the last few months then your card details may have been copied and you are advised to contact your bank.
Fraud risk for thousands after Lush website hack
Fraud risk for thousands after Lush website hack
Comment