OnePlus Customers had Order Information Accessed by an Unauthorized Party (Updated)

OnePlus online store may have been hacked again.

Emails were just sent to OnePlus customers informing them of a security breach of some sort through the online OnePlus store. The email is titled “Security Notification” and mentions that an “unauthorized party” was able to access order information.

The email states that they have confirmed that “your payment information, password and account are safe,” but that names, contact numbers, emails, and shipping addresses may have been exposed. OnePlus also notes that they are continuing to investigate and will update everyone as they learn more.

As you may recall, the OnePlus store was hacked back in January of 2018 and customer credit card numbers were exposed. This doesn’t appear to be as severe as that, at least for now. Still, OnePlus is warning that someone may pose as OnePlus and try to extract further info from you since they know some of your info.

We’ve reached out to OnePlus for comment and will update should we hear back.

• UPDATE: In a statement, OnePlus tells us that they “took immediate steps to stop the intruder and reinforce security” and that they are “working with the relevant authorities to further investigate this incident.” Whatever the flaw in their site was, OnePlus isn’t sharing, but did say that they are partnering with a “world-renowned security platform” next month and will launch an official bug bounty program by the end of December. You can find more at OnePlus’ forums.

Security Notification

We are reaching out to you directly as we have discovered that part of your order information was accessed by an unauthorized party. We can confirm that your payment information, password and account are safe, but your name, contact number, email and shipping address may have been exposed.

We took immediate steps to stop the intruder and reinforce security. Right now, we are working with the relevant authorities to further investigate this incident and protect your data.

We wanted to notify you of this so that you can be alert to people pretending to be OnePlus to get further information from you, or people asking you to buy products or services from them. OnePlus will never ask you for your passwords, and any financial information should only be provided via a secure payment page on the OnePlus website or one of our partners if you are buying products from us.

We are deeply sorry about this, and are committed to doing everything in our power to prevent further such incidents. We will continue to investigate and update you as we learn more. In the meantime, please contact us with any questions or concerns at Customer Support.