Interestingly, I had a phone call from my Credit Card company earlier in the year. They wanted to check with me about several transactions but said that the one concerning them was an Internet payment to R-Comp.
Now this was a legit transaction and there was no problem. However, it presumably arose because of monitoring, perhaps because of issues similar to those in this article.
R-Comp are the innocent party in all of this but, given the malicious intent of others, would probably be well advised to implement some security. In the meantime, there are plenty of other ways to order from them if anyone has concerns. It was Internet fraud that took down Spacetech, let's not let it (or fear of it) damage another important RISC OS supplier.