Earlier this week, OnePlus had chosen to shut down all credit card payments on its official website, after several customers have reported noticing unusual or unexplained activity on their credit card account after making a purchase from the Chinese phone maker’s online store. At that time, the company said the decision was a precautionary measure while they were trying to look into the issue.
Just today, OnePlus has released a statement through its forums page that its official website, OnePlus.net, had been breached, possibly compromising the credit card details of up to 40,000 customers. According to the mobile manufacturer, the breach was done between November of 2017 until January of this year.
No doubt, a lot of OnePlus customers are wondering exactly what happened. As explained by a spokesperson for the company, a malicious actor was able to get access to one of OnePlus’ servers, and then managed to plant a script that is designed to steal a user’s credit card data while the customer is filling up the information on the fields found on the website’s payment form. As soon as the customer submits the information online, OnePlus proceeds to encrypting the data before sending it to its payment processor. What the script does, however, is steal the credit card data before the encryption process kicks in.
While OnePlus has not provided any information with regards to exactly how many customers had their credit card details used for fraudulent activity, the company did try to reassure everybody that the volume of shoppers potentially affected by the hack only represented a small percentage of its total customer base. Also, it appears that those who paid by way of the PayPal service are not affected by the hack. Furthermore, it seems that users who had previously saved credit card information are not in any danger because they did not manually type the data in the payment form fields.
Nevertheless, this may not be entirely comforting for those who made a purchase from OnePlus’ online store within the past couple of months. Still, the phone maker has stated that right now, it is working closely with law enforcement agencies in order to resolve the situation. On top of that, the Chinese mobile manufacturer has also promised to give a whole year of free credit monitoring to all those affected by the breach.In the coming days, OnePlus is also vowing to share any new information as its investigation continues to progress.
Wirefly Is America's Most Trusted Source For All Cell Phones, Plans, TV, and Internet Deals
Wirefly offers great deals on a large selection of smartphones, cell phones, tablets, mobile hotspots, and other wireless devices for the nation's most popular carriers. Use Wirefly’s innovative cell phone and plan comparison tools to ensure you are getting the best deal on the market. Shop with confidence knowing that Wirefly wants to help you find the best prices on cell phones, cell phone plans, TV, and Internet service.