Comment: protecting customers from the Heartbleed bug
The so-called Heartbleed bug has put customers’ private information and payment card numbers at risk. Here Trusted Shops outlines the steps that retailers need to take to protect their customers from the bug.
The Heartbleed bug may have affected up to two-thirds of web servers worldwide, including online merchants large and small.
In the worst of cases, this internet security flaw implies that online retailers, who were doing everything right and required to protect customer data, may have still been exposing sensitive information to nearly any hacker.
Retailers, particularly online sellers, need to take the following steps to protect their customers from the bug:
- Check if your site is affected at https://lastpass.com/heartbleed/
- If the answer is no, email all your customers to reassure them that your website IS and HAS been safe.
- If your site is affected, issue a dedicated email newsletter to inform customers about any security breaches and highlight the steps they need to take in terms of changing any passwords.
- On existing customer accounts, add a prompt next time they visit encouraging them to change their password
Showing customers that you are being pro-active is key to reassuring them and rebuilding trust. Even if Heartbleed has not impacted your website, your customers do not know this so be sure to tell them.
Founded in 1999, Trusted Shops has accredited over 16,000 retailers with the service benefiting both shops and consumers.
