Jump to content


  • Tweets

  • Posts

  • Our picks

    • If you are buying a used car – you need to read this survival guide.
      • 1 reply
    • Hello,

      On 15/1/24 booked appointment with Big Motoring World (BMW) to view a mini on 17/1/24 at 8pm at their Enfield dealership.  

      Car was dirty and test drive was two circuits of roundabout on entry to the showroom.  Was p/x my car and rushed by sales exec and a manager into buying the mini and a 3yr warranty that night, sale all wrapped up by 10pm.  They strongly advised me taking warranty out on car that age (2017) and confirmed it was honoured at over 500 UK registered garages.

      The next day, 18/1/24 noticed amber engine warning light on dashboard , immediately phoned BMW aftercare team to ask for it to be investigated asap at nearest garage to me. After 15 mins on hold was told only their 5 service centres across the UK can deal with car issues with earliest date for inspection in March ! Said I’m not happy with that given what sales team advised or driving car. Told an amber warning light only advisory so to drive with caution and call back when light goes red.

      I’m not happy to do this, drive the car or with the after care experience (a sign of further stresses to come) so want a refund and to return the car asap.

      Please can you advise what I need to do today to get this done. 
       

      Many thanks 
      • 81 replies
    • Housing Association property flooding. https://www.consumeractiongroup.co.uk/topic/438641-housing-association-property-flooding/&do=findComment&comment=5124299
      • 161 replies
    • We have finally managed to obtain the transcript of this case.

      The judge's reasoning is very useful and will certainly be helpful in any other cases relating to third-party rights where the customer has contracted with the courier company by using a broker.
      This is generally speaking the problem with using PackLink who are domiciled in Spain and very conveniently out of reach of the British justice system.

      Frankly I don't think that is any accident.

      One of the points that the judge made was that the customers contract with the broker specifically refers to the courier – and it is clear that the courier knows that they are acting for a third party. There is no need to name the third party. They just have to be recognisably part of a class of person – such as a sender or a recipient of the parcel.

      Please note that a recent case against UPS failed on exactly the same issue with the judge held that the Contracts (Rights of Third Parties) Act 1999 did not apply.

      We will be getting that transcript very soon. We will look at it and we will understand how the judge made such catastrophic mistakes. It was a very poor judgement.
      We will be recommending that people do include this adverse judgement in their bundle so that when they go to county court the judge will see both sides and see the arguments against this adverse judgement.
      Also, we will be to demonstrate to the judge that we are fair-minded and that we don't mind bringing everything to the attention of the judge even if it is against our own interests.
      This is good ethical practice.

      It would be very nice if the parcel delivery companies – including EVRi – practised this kind of thing as well.

       

      OT APPROVED, 365MC637, FAROOQ, EVRi, 12.07.23 (BRENT) - J v4.pdf
        • Like

Lycamobile Data Breach - Have You Been Affected?


Recommended Posts

Are you a Lycamobile Customer?

Have you had recent transaction you dont recognise declined to companies that you have never shopped with before Online or Internationally?

 

You could be at risk. A number of customer have begun reporting that their Debit Cards may have been compromised from a previous breach. ISPreview are investigating, but please let us know if you are having issues. 

 

WWW.ISPREVIEW.CO.UK

Mobile operator Lyca Mobile, which last week confirmed that it had been struck by a serious cyberattack that disrupted their systems and connectivity

Your details could be at risk of Identity theft. Be Vigilant! 

  • Thanks 1
Link to post
Share on other sites

  • 2 weeks later...

I've been affected - got 0.00 'tests against credit card used for lycamobile which are apparently precursors to charging your card via various known dubious methods - buying vouchers and suchlike. Some apparently charged for vouchers etc straight off.

 

Seems this is NOT limited to last Octobers lycamobile data breach and newly used/created cards used very recently for lycamobile payments are affected, and company seems to have a very dubious history IMO

 

Really seems to be a company to avoid

Cancelled my lycamobile package and deleted card details from account as well as card being blocked and changed.

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

Some other examples from Ispreview

 

page-21

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

I think the really serious bit of this is thats its clearly ongoing with no notification to users from lyca or the data commissioner

The credit card visa version i used' 'security team' also seems utterly clueless about this - but thats not an unexpected level of negligence/incompetence.

Had to find out the 99.9% likely source of issue myself.

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

Posted (edited)

As I spent another hour or so last night cleaning up the mess from lycamobile apparently 'leaking' my credit card details, I thought 'why the heck hasn't anyone proactively notified me of a 'potential' ongoing issue with lycamobile leaking credit card details?

Nothing from lyca, nothing from the ICO, nothing from my credit card (used on lyca) security/fraud team (well other than blocking the card when a weird very unauthorised transaction occurs?

 

So putting aside that there was apparently a massive donation from 'lyca' to the tories despite (lol because?) of the history of allegations of money laundering etc which seems to be associated with the company (which one you may ask) I went to have a live chat with the ICO

 

Live chat not available and ICO page today (31/05/24) says:

"Our helpline and live chat service will be closed between 1pm and 3pm today (Tuesday 21 May 2024) for staff training."

 

No wonder data breaches go unaddressed eh?

 

 

 

Edited by tobyjugg2

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

Well, been on chat to ICO - I think anyone whos thinking of setting up a business to rip off CC and personal details has little to worry about

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

So here's my story. 

 

Lyca moved to EE last year to as part of the BT Wholesale opening up EE to more MVNOs... Never considered Lyca before because the coverage was terrible. Going to EE meant the reliability being excellent IMHO (Background of tech) 

 

I ordered a SIM last year to convert to ESIM and paid for an unlimited plan for £9.99

Service from CS was dreadful. Ditched and went away. 

Came back in March / April this year when I found an offer for 6 months @£9.99 unlimited data.

Ditched them as the latency and other factors was terrible and went to Spusu. (Also EE MVNO) 

 

On a Sunday night a few weeks ago, had a failed transaction for Coles Australia. I challenged with with my bank even though it was declined. They gave me some info for the payment for me to do my investigation 

 

 

 

  • Thanks 1
Link to post
Share on other sites

I also started getting OTPs to a mobile number that I since have had to change after 10 years in case it was compromised. 

The only card that I had provided to Lyca was a virtual card that they had stored for payment processing.

 

TLDR - Lyca are claiming no breach, there is definitely a breach. ICO are useless and havent heard from Lyca. 

 

  • I agree 1
Link to post
Share on other sites

On 31/05/2024 at 10:09, fkofilee said:

So here's my story. 

 

Lyca moved to EE last year to as part of the BT Wholesale opening up EE to more MVNOs... Never considered Lyca before because the coverage was terrible. Going to EE meant the reliability being excellent IMHO (Background of tech) 

 

I ordered a SIM last year to convert to ESIM and paid for an unlimited plan for £9.99

Service from CS was dreadful. Ditched and went away. 

Came back in March / April this year when I found an offer for 6 months @£9.99 unlimited data.

Ditched them as the latency and other factors was terrible and went to Spusu. (Also EE MVNO) 

 

On a Sunday night a few weeks ago, had a failed transaction for Coles Australia. I challenged with with my bank even though it was declined. They gave me some info for the payment for me to do my investigation 

 

 

 

That's very interesting to hear!

I received a notification of a CC verification from Coles in Australia on the 12th May - also a Sunday evening.

Not having been to Oz for about 30 years I was somewhat suspicious and so immediately cancelled the card.

Guess what, it's the one I use to pay Lyca with...........

If you've got any further information I'd be interested in hearing it.

Link to post
Share on other sites

Hi @OldSpot

Were you a lyca customer with that CC last Oct or before?

(if so, means it could have been the Oct 2023 breach where your data was 'leaked)

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

43 minutes ago, tobyjugg2 said:

Hi @OldSpot

Were you a lyca customer with that CC last Oct or before?

(if so, means it could have been the Oct 2023 breach where your data was 'leaked)

Yes. Lyca customer before October 2023 with that card.

Link to post
Share on other sites

Posted (edited)

From what I'm seeing from other forums, a number of the more recent fraud attempts can/could be identified as relating to the known Oct '23 lyca leak

But a number seem to be quite clearly related to cards and accounts only used this year, and some in the last month.

Some are possibly related to a couple of large breaches of data (some not from lyca) being compiled for a more effective attack on cards inc possible (careful words) ticket company breach

Edited by tobyjugg2

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

FORUMS.MONEYSAVINGEXPERT.COM

Hi @BHouston12 - we've moved your post into the ongoing thread about similar matters

Added a new card - Compromised potentially only hours later. 

i smell another magecart hack coming on. 

  • Thanks 1
Link to post
Share on other sites

Posted (edited)

I've spoken with a number of others who have confirmed their issues MUST be from new leaks from lyca, not the october '23 leak.

That the regulator is NOT on this is shameful

 

Also alleged SNOWFLAKE leak with vast amounts of ticketmaster and santander data - now its in the news

- data allegedly advertised for sale $500,000

 

WWW.THEREGISTER.COM

Infosec house claims Ticketmaster, Santander hit via cloud storage

 

SOCRADAR.IO

Reports of the Snowflake breach have emerged suggesting unauthorized access to its systems, which may have compromised...

 

Edited by tobyjugg2

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

Just a little something for consideration

When a card is compromised, the replacements can be set up to automatically allow or manually re-add, old recurring transactions.

The card issuer may ask you to confirm legitimate transactions which they would effectively 'migrate' to the new card

Some do - some don't. Some staff on some cards seem to be entirely unaware/uncaring about this.

Some card issuers expect you to sort it all out manually.

 

BUT if the leak is an ongoing lyca leakas it seems - as soon as you or your CC supplier give it to lyca/the leak source - compromised again

 

 

A note on security

DONT use the same email or phone number for your banking as you do for sims etc. Although a bank eg santander leak would compromise this

Infp seems to suggest that single/compromised multi factor authentication customers are priority targets, with more robustly secure cards being hit by 0.00 tests first

Consider that the email address is one of the OTP recieving options AND one of the OTP security checks prior to sending the OTP - with the phone number being another

So if they've got your card and email (same email for banking and end contact) - and you aren't forcing a phone OTP - you are compromised.

 

The Tory Legacy

Record high: Taxes, Immigration, Excrement in waterways, energy company/crony profits

Crumbling: Hospitals, Schools, council services, businesses and roads

If only the Govt had thrown a protective ring around care homes

with the same gusto they do around their crooked MPs

 

 “Do I want to spend every Friday for the next five years in Clacton?”

Farage, Feb 2024 talking smack about the Peninsula town

.. before he decided he wanted their votes

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 Caggers

    • No registered users viewing this page.

  • Have we helped you ...?


×
×
  • Create New...