Clubcard site hit by new hack attack

Tesco Clubcard holders are being urged to change their online passwords following a second hack attack in four months, with thousands of pounds’ worth of vouchers being stolen across individual accounts.
Internet forum MoneySavingExpert said it had been “inundated” with complaints from Tesco shoppers who have logged into their accounts, only to find their vouchers had disappeared.
Police were first called in to investigate the scam four months ago, and Tesco believes fraudsters who have stolen online IDs and passwords through phishing emails are using them on the Clubcard website hoping victims use the same details.
In February Tesco insisted it had received fewer than 100 complaints. The supermarket has more than 16 million Clubcard holders across the UK, although not all of them have an online account.
One shopper wrote online: “I’ve only just been alerted to this through a tweet from MSE. About £70 of vouchers have been taken from my account.”
Another last month lost nearly £100. She said: “I had been regularly checking my account as I had been saving vouchers for two years. It was fine – until yesterday, when I saw that £92 of vouchers had been redeemed in two London based stores on the 5th and 6th of May.”
A Tesco spokesman insisted: “We’re replacing vouchers so no customers will lose out. The police investigation is ongoing.”