The Lush UK website has been shut down on Friday after it was found that hackers had been stealing credit card numbers from the website. A message has been put up on the website warning the customers about the hack and telling that their account information is likely to have been compromised with.

The message also makes it very clear that all the users who had made use of their credit cards or had made online purchases on the handmade cosmetic Company’s UK site between October 4th and January 20th were likely to have been affected.

Besides a message for the customers, a message too has been left for the hacker by Lush.

The message reads as “If you are reading this, our web team would like to say that your talents are formidable. We would like to offer you a job – were it not for the fact that your morals are clearly not compatible with ours or our customers”.

While a few customers have asked for details about their stolen credit card, there are some others who are showing anger that even though Lush had come to know that it had the hacking had taken place on Christmas eve, still they had waited for so long.