OnePlus Data Leak: Everything We Know So Far
OnePlus discloses attack and lays out details for around 40000 affected customers
First, allegations on collecting customers’ confidential data and now a credit card leak – it hasn’t been the best of times lately for the Chinese smartphone maker, OnePlus.
“We are deeply sorry to announce that we have indeed been attacked, and up to 40k users at oneplus.net may be affected by the incident,” wrote a staff member on OnePlus’ official forum.
RELATED: Cyber attacks represent the third biggest threat to mankind
This potential leak started generating some noise around ten days ago (on January 11th), but the exploit had been on the company’s website https://oneplus.net/ since mid-November.
As of now, OnePlus has identified any and all potentially affected customers and has sent e-mails to them. If you bought a OnePlus smartphone anytime from mid-November to the 11th of January, there are chances your credit card details may have been leaked.
Here are the things you should keep in mind if you think your data has been leaked by OnePlus:
You might be affected by the OnePlus Data Leak, if…
- You bought from https://oneplus.net/ during anytime from mid-November through the 11th of January.
- You paid directly through the website without the involvement of a 3rd-party such as PayPal.
You’re not affected by the OnePlus Data Leak, if…
- You didn’t buy from https://oneplus.net/
- You paid through a 3rd-party payment provider such as PayPal
- You saved your credit card while making the payment
What does OnePlus have to say?
As expected, OnePlus has suspended Credit Card payments on its site until the dust settles. In the meantime, it has requested that its customers check their card statements and report any suspicious transactions.
“We recommend that you check your card statements and report any charges you don’t recognize to your bank. They will help you initiate a chargeback and prevent any financial loss. For enquiries, please get in touch with our support team at https://oneplus.net/support,” further wrote OnePlus member.
If you’re affected, cancel your card ASAP
Granted, OnePlus will probably initiate your chargeback in the event of any fraudulent transactions. However, that doesn’t mean you’re in the clear. The hackers have your credit card information, they can still use it. That’s why canceling your card is the first thing you MUST do.
Final Thoughts
Thanks to the constant efforts of security researchers and hackers, as well as a lack of efforts by organizations; we’ve become accustomed to this kind of news. That’s because most data leaks and breaches don’t do us any significant direct damage and we become numb to them. The OnePlus data leak is a timely reminder that this isn’t always the case.
5 Ways to Determine if a Website is Fake, Fraudulent, or a Scam – 2018
in Hashing Out Cyber SecurityHow to Fix ‘ERR_SSL_PROTOCOL_ERROR’ on Google Chrome
in Everything EncryptionRe-Hashed: How to Fix SSL Connection Errors on Android Phones
in Everything EncryptionCloud Security: 5 Serious Emerging Cloud Computing Threats to Avoid
in ssl certificatesThis is what happens when your SSL certificate expires
in Everything EncryptionRe-Hashed: Troubleshoot Firefox’s “Performing TLS Handshake” Message
in Hashing Out Cyber SecurityReport it Right: AMCA got hacked – Not Quest and LabCorp
in Hashing Out Cyber SecurityRe-Hashed: How to clear HSTS settings in Chrome and Firefox
in Everything EncryptionRe-Hashed: The Difference Between SHA-1, SHA-2 and SHA-256 Hash Algorithms
in Everything EncryptionThe Difference Between Root Certificates and Intermediate Certificates
in Everything EncryptionThe difference between Encryption, Hashing and Salting
in Everything EncryptionRe-Hashed: How To Disable Firefox Insecure Password Warnings
in Hashing Out Cyber SecurityCipher Suites: Ciphers, Algorithms and Negotiating Security Settings
in Everything EncryptionThe Ultimate Hacker Movies List for December 2020
in Hashing Out Cyber Security Monthly DigestAnatomy of a Scam: Work from home for Amazon
in Hashing Out Cyber SecurityThe Top 9 Cyber Security Threats That Will Ruin Your Day
in Hashing Out Cyber SecurityHow strong is 256-bit Encryption?
in Everything EncryptionRe-Hashed: How to Trust Manually Installed Root Certificates in iOS 10.3
in Everything EncryptionHow to View SSL Certificate Details in Chrome 56
in Industry LowdownPayPal Phishing Certificates Far More Prevalent Than Previously Thought
in Industry Lowdown