Lyca Mobile compromised - Credit Card Details Stolen

[lmfy2k]

Lyca had a breach in 2023, they stated that nothing of importance had been stolen and just to change your password just in case: https://www.uswitch.com/mobiles/news/lyca-mobile-data-breach/

Turns out credit card details were stolen

My card was attempted to be used in USA yesterday, luckily Lloyds stopped it and have cancelled my card.

I had a Lyca Esim which i use as backup sim since 2023

Reports now emerging online about this but Lyca still hush hush

Lyca Mobile: Suspicious Card Transactions

Used this virtual card just for Lyca and cancelled it a while ago, today there was an attempt at a random transaction Can I stress that this hasn’t affected any other card, so I don’t believe it’s a device compromise. This was only ever used for Lyca exclusively This card was created in March...

www.ispreview.co.uk

https://www.reddit.com/r/cybersecurity/comments/1ct8m0q/lyca_mobile_uk_full_payment_details_seem_leaked/

https://www.reddit.com/r/UKPersonalFinance/comments/1cthgct/lycamobile_users_had_card_fraud_or_attempted_card/

LycaMobile Users: Had card fraud/attempted card fraud recently?

I signed up for a LycaMobile plan in March 2024, I used a virtual card created exclusively for LycaMobile and even named it Lyca, cancelling it after my purchase.

forums.moneysavingexpert.com

just a heads up if you see any dodgy transactions, ive now binned the esim and will not be using Lyca ever again.

 

[mithrandir]

Yikes. What a scummy dishonest company. They should have been upfront about it.

Good job on Lloyds blocking the transaction though.

 

[grudas]

Interesting. I recently moved away from them but my card recently got blocked by hsbc for attempted purchase from USA… I was with them in 23

 

[Disco_P]

I had a Lyca sim at some point but can't remember which card it was on. I think it was a revolut virtual one but it could have been my main bank card.

Lyca have been a terrible company since the horrible mishandling of the hack last year.

Hopefully this kills off the company for good.

 

[biron_w]

Somebody used my credit card to buy something for nearly 3 grand I did use Lyca towards the end of last year. Luckily my credit card company refunded the money.

 

[mithrandir]

Somebody used my credit card to buy something for nearly 3 grand I did use Lyca towards the end of last year. Luckily my credit card company refunded the money.

Oh damn.

 

[neoboy]

Well snap, had some weird 1p charge that got flagged up by Barclaycard on Saturday and they blocked it right away after I confirmed it wasn't me.

Thought might have been from the trip I had in Poland recently but I was with Lyca during the breach which was handled awfully by them.

 

[RavenLunatic]

Just got a text message from my bank today someone was trying to make a payment to METAPAY*ADS. Fortunately they caught it and have cancelled my card. I have to use Lycamobile for my smart watch as there are not that many cheap ESIM providers otherwise I would drop them.

 

[neoboy]

My friend signed up last week and had unauthorised charges on their card on Sat, starting to think there's something really dodgy going on and it's not just to do with data breach last year.

I switched to Spusu and noticed that Lyca seems to have now disappeared from usual SIM only comparison places. They've also been charging me wrong for last 2 months, customer service replied week later saying tough, you've left so we can't help you now.

Now in the news that auditors refusing to sign off their accounts.

 

[meandu229]

Thanks for the heads up, we had my Mrs Monzo card affected by this, have been wondering where it came from.

 

[mithrandir]

Damn. If the unauthorised charge trails lead back to Lyca then they should be held accountable.

 

[Orcvader]

My friend signed up last week and had unauthorised charges on their card on Sat, starting to think there's something really dodgy going on and it's not just to do with data breach last year.

That's pretty scary to know it can still happen with new customers. Sounds like a much bigger issue with their security if that's the case.

 

[RavenLunatic]

I phoned Lyca yesterday as there is no way to cancel the eSIM online. I was uncomfortable answering security questions with the overseas contact centre, but I did, and I am half expecting to be targeted again! I told them the reason why I was leaving and they didn't dispute it at all.