Update
Despite being a very secure locked down site, which passes PCI compliance (and these PCI checks hilight theoretical and pretty unbelivable and negligable risks), it looks like a single file was comprimised. This has been resolved
We go to extraordainary lengths to make this site secure. It does seem that the more popular a site is the harder the hackers try, which keeps us on our toes
I can confirm that at no point was anyone comprimised, either in terms of data loss or nasty scripts landdng on your machines. This minor threat was basically trying to pull stuff into an iframe from a site that no longer exists. On top of that, the site firewall was actually preventing any data from that (dead) site from being displayed or executed
I have confirmed with a clinet that our fix has resolved the issue. I will be spending today looking at further hardening the security
Additional measures have been taken, and are being taken right now to stop this from happening again
For obvious reasons I will not discuss security measures on an open forum, all I will say is that we deal with these things very swiftly, and we then we also go away, look at the logs, and other things to make sure that that particular expoit can never happen again
so it was difficult to take it seriously at the time...