Cosmetics company Lush has had its New Zealand website hacked and is telling customers who made online orders to contact their bank.
The Lush UK website was recently compromised and the company says while the New Zealand and Australian sites are not linked to the UK site, both have also been targeted by hackers.
It says personal data may have been obtained by the hackers and customers should contact their banks to discuss cancelling their credit cards.
Lush says it is doing all it can to investigate the breach of privacy and is working with police, forensic investigators and banks.
The company is in the process of contacting all online customers individually by email to apologise for the online breach.
