Chinese smartphone maker OnePlus has suffered a new data breach exposing personal and order information of an undisclosed number of its customers, likely, as a result of a vulnerability in its online store website.
The breach came to light after OnePlus started informing affected customers via email and published a brief FAQ page to disclose information about the security incident.
According to OnePlus, the company discovered the breach just last week after an unauthorized party accessed order information of its customers, including their names, contact numbers, emails, and shipping addresses.
“Last week while monitoring our systems, our security team discovered that some of our users’ order information was accessed by an unauthorized party,” the company said.
OnePlus also assured that not all customers were affected and that the attackers were not able to access any payment information, passwords, and associated accounts.
“Impacted users may receive spam and phishing emails as a result of this incident.”
Though the company did not provide any detail of the vulnerability that attackers exploited to compromise its store, it did inspect the server thoroughly to ensure there…
http://feedproxy.google.com/~r/TheHackersNews/~3/G0Et8IldzMk/oneplus-store-data-breach.html