However, that was not the outcome, and we then realised the possible impact this could have been having on e-biz in general. What astonished us was when we contacted our secure payment provider about this they stated that they had be aware about the possibility of this hole existing for the last 5 years, and had ways round the problem, but hadn't had the courtesy to inform us of this fact until we informed them. In addition we could easily like many other companies have already done, traded online assuming that we were safe as we were not informed. It seems that no one is taking responsibility. Admittedly, the level of misuse may be negligible to the turnover of many large e-businesses, but to SME's it could be the critical difference.
More information is contained on our initial press release which can be found here.