One plus security breach

blondeonblonde

Just a heads up to anyone who has bought a oneplus phone in the past. I opened my internet banking last Friday to find that someone had fraudulently spent nearly €400 on my credit card. Needless to say I rang credit card services and had my card cancelled.

I had been wondering where my credit card details had been taken from and spent the afternoon changing passwords on various accounts but later that afternoon I got an email from one plus saying that they had had a security breach in which user credit card details were compromised.

Keep an eye on your bank account folks and make sure that you report any fake transactions.

Anyone else affected by this?

Snotty

The phone maker reveals that oneplus.net had been under attack for an extended period – from mid-November 2017 to January 11, 2018. Credit card information (including card numbers, expiry dates and security codes) entered at oneplus.net during this time “may be compromised,” the company says.

Thankfully only effected customers from Nov to January.
Still very surprised they had this sort of breach for nearly 3 months without noticing!!!

dudara

Snotty wrote: »

Still very surprised they had this sort of breach for nearly 3 months without noticing!!!

Not really very surprising. Depending on an organisation's level of maturity when it comes to logging and monitoring of activity, it's entirely plausible that a breach may not be spotted for a period of time