Please find a statement from Comms Express regarding the Data Breach with all the main questions answered
Visa advised us via Paypal of fraudulent activity related to our site on the 26th March 2018, we reviewed this and immediately engaged a PCI Forensic team to investigate how this had happened. The initial investigation identified a weakness on our website that had been compromised on the 19th February 2018 by criminal hackers.
What Information Was Involved?
From the investigation it was concluded that payment card data including; cardholder name, credit or debit card number, expiration date, cardholder verification value, and service code; had been compromised during live transactions on the website. We can also confirm that there is no evidence that any other customer data was affected in this breach.
What Are We Doing?
Comms Express has worked resourcefully with a third-party forensic expert, the ICO and the Met Police Action Fraud team on this investigation; which at present is still ongoing. The malicious file was removed on the 6th April so any transactions placed after this date are not affected by this breach.
What Can You Do?
As you might have been subjected to fraudulent activity on your account, we recommend that you review your card payment statements to identify if you have been affected by this incident. If this is the case then please call contact the appropriate Bank or Building Society immediately. The phone number to call is usually on the back of the credit or debit card or on your statements
How Do I Know If I Was Affected?
Comms Express has listed all the online orders taken during the suspected breach, from the time the malicious file was loaded until we removed the file. We have identified you or your company placed an order with us during this time. In light of this, we advise that you check your payment card statements to see if there are any unauthorised transactions.
Is There Additional Information Related To Comms Express’s Investigation Update?
Comms Express has not as yet received the final report from the third party investigator in relation to the ongoing investigation. Any updates will be made available to you via our designated webpage here as soon as we receive them.