OnePlus Data Breach, customers private info exposed.

Privacy seems a thing of the past now. Doesn’t matter what products you buy, user data and information always seems to be getting out to third-parties from phones to even online streaming services like Disney+ latest data breach on launch day. Nobody is 100% secure anymore. OnePlus, the Chinese smartphone manufacturer has once again been attacked by hackers and some customer’s data has been breached.

OnePlus informed it’s users on Friday that its online store was attacked by hackers and some customers’ personal details related to their orders were accessed by an unauthorized party. Ziv C, OnePlus security team member wrote on the company’s blog:

We want to update you that we have discovered that some of our users’ order information was accessed by an unauthorised party.
Ziv C, security team member at OnePlus

The Company has however informed users that all payment information, passwords and accounts are safe and that data was not breached. The data breach included name, contact number, email, and shipping addresses for some orders. OnePlus did not comment about the number of users that were affected or where in the world they were affected. OnePlus also mentioned that a certain loophole in it’s website was exploited but has not revealed more information about it.

The company was hit with a similar attack in January of 2018 and the data of almost 40,000 OnePlus customers was leaked. It has been almost of week since this data breach but the information has been made public just recently. According to Ziv C:

Before making this public, we informed our impacted users by email. Right now, we are working with the relevant authorities to further investigate this incident
Ziv C, security team member, OnePlus

The Company does say that it’s users affected by the breach may get spam and phishing mail as a result. The company has said:

We took immediate steps to stop the intruder and reinforce security, making sure there are no similar vulnerabilities. Before making this public, we informed our impacted users by email. Right now, we are working with the relevant authorities to further investigate this incident

If you don’t get an email from us, rest assured that your order information is safe. However, if you have further concerns, please contact us at Customer Support for assistance

According to OnePlus, they are launching a bug bounty program next month and also partnering with a security company to make sure that this does not happen again. At least the company is taking steps to prevent this in the future.

Follow INCPAK on Facebook / Twitter / Instagram for updates.