Regular readers of this blog will know that I have been a loyal and happy Flemington Direct customer, but all that has changed.
Last night I received an email from a self proclaimed ‘hacktivist’ who had accessed their email newsletter system and apparently the personal data of all their customers (click here to view the email).
If you are a Flemington Direct customer then you know something funny has been happening for the past few weeks. There have been several weird emails saying they have ceased trading and that they will be starting up a new business called Flemington Fresh. Peppered in between were emails about data (in)security, a recommendation of another vegetable delivery service as well as a personal phone call from a staff member apologising for them closing down. What a mess!
Mitchell, one of the co-founders of Flemington Direct, has set up a website to tell his side of the story (click here) and he says he did not send the email last night (see the comments at the bottom of his website).
If this hacktivist is to be believed, which seems plausible because he sent the email using the company email newsletter template and FlemingtonDirect.com.au has been pulled down, then should we all be very worried?
What I want to know is – are my credit card details secure? A response from the current owners Christine and Nathan would be much appreciated.
From reading Mitchell’s side of the story I understand that the closing of the company was due to deeply personal issues between the owners. However, that does not excuse them from bad business practices, such as apparently not storing credit card details securely or having secure password systems to their customer database.
I will never again use Fleming Direct or Flemington Fresh to deliver my fruit and vegetables. If you have a good box scheme you would like to pimp to me, leave a link to your website in the comments!
Are you a Flemington Direct customer? What do you think of all this?