Lush.co.uk eCommerce site has been shutdown due to hackers attempting to gain access.
Lush have made the correct decision in shuting down their website so that they can find out how hacker have managed to access the site, even though the loss of revenue will be affecting their bottom line.
What this shows other Retailers is that they need to constantly test for security issues and hack attempts on their eCommerce sites. I know of very few retailers who have employees who's sole role is to validate security on their eCommerce site. If you have your eCommerce solution run by a partner then you should get your partner to validate your website for security problems.
Recommendation of things to do today:
1. Review all software and check for any security updates.
2. Check log files for hackers attempting to access your site.
3. Check all admin/merchant accounts( delete old employees and unused accounts) and validate all passwords are being changed on a regular bases.