【2001 Archives】

Things aren't looking so hot for approximately 40001 Archives000 OnePlus customers. And no, not because they'll probably have to wait until June to upgrade to the OnePlus 6.

It turns out that the company's website was hacked, and in the process credit card numbers and other payment information was likely stolen.

SEE ALSO: OnePlus issues statement as some buyers complain of credit card fraud

According to a statement issued by the Chinese smartphone manufacturer, "a malicious script was injected into the payment page code to sniff out credit card info while it was being entered."

What this means in practice is that, from roughly mid November of 2017 to January 11, 2018, any customer who put their credit card into OnePlus.net could have had it lifted by hackers. Some customers are already reporting fraudulent charges.

"The malicious script operated intermittently, capturing and sending data directly from the user's browser," the company said in a statement. "It has since been eliminated. We have quarantined the infected server and reinforced all relevant system structures."

OnePlus emailed the customers it believes might have been affected, and noted that both card expiration dates and security codes could also have been stolen.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

Original image has been replaced. Credit: Mashable

Security researchers at Fidus Information Security looked into the breach, and what they found doesn't look so good for OnePlus. According to a Fidus blogpost, "OnePlus do not appear to be PCI compliant, nor do they mention this anywhere on the website."

Why does this matter? PCI is short for Payment Card Industry Data Security Standard, and, according to the PCI Security Standards Council, the standards are "the operational and technical requirements for organizations accepting or processing payment transactions, and for software developers and manufacturers of applications and devices used in those transactions."

In other words, according to Fidus, OnePlus may not have been taking basic steps to protect its customers data. Like we said, not looking good.

So, what can you do if you got an email from OnePlus notifying you of the breach? Not much, unfortunately. OnePlus says you should check your bank statement for fraudulent charges, and reach out to the company for any "enquiries."

OnePlus will also offer "one year of credit monitoring to affected customers," according to a company spokesperson.

Somehow, for those who already had their credit cards stolen, we don't imagine these measures will provide much solace.

This story has been updated to note that OnePlus is offering limited credit monitoring.

---

Featured Video For You

---

The OnePlus 5T could have been perfect—if it weren't for its cameras

---

Topics Cybersecurity OnePlus

• Life
• Entertainment
• Tech
• Deals
• Digital Culture
• Games
• Shopping
• Social Good

• Productivity Boost: Enable 'Night Mode' on All Your Devices
• A Rare Look Inside the Library at Grey Gardens
• The Inventions of Witches
• Puerto Rico Sketchbook: The Artists with the Shovels
• Whale Vomit Episode 5: Startup Monarchy
• A Very Particular Bird
• A Visit to the Musée d’Edith Piaf
• Redux: James Baldwin, Raymond Carver, Dorothea Lasky by The Paris Review
• Grim video of a starving polar bear could show the species' future
• ‘Women at Work’

• 44 Black Friday headphone deals: AirPods Pro at record
• Nabokov Reads “The Ballad of Longwood Glen” by The Paris Review
• Gwyneth Paltrow's drinking tea and he's Ken: The 8 best tweets of the week
• Cyber Monday Anker Soundcore deals: headphones, earbuds, speakers
• Black Friday PlayStation deals 2023: Save on 'Star Wars Jedi: Survivor' and much more
• May ’68: Posters of the Revolution
• 'Succession' death internet reactions
• May ’68: What Legacy?
• Sometimes the Pie Just Calls Your Name by Rick Bragg
• You, Too, Can Live in Norman Mailer’s House

• How to Secure Your Android Phone and Get the Most Out of Smart Lock
• Mark Twain’s Disturbing Passion for Collecting Young Girls
• Redux: Jack Kerouac, Shelly Oria, Erica Ehrenberg by The Paris Review
• How Original Are You? by Robert Shore
• Best smartwatch deal: Get $70 off a Samsung Galaxy Watch7 and a free watch band
• The Rise of Queer Comics
• Hale and Hearty by Robin Bellinger
• All This Blood and Love
• The best day to book your flight, according to Google
• Art from Guantánamo   by Erin Thompson

• Best portable power station deal: Save 44% on the Jackery Explorer 100 v2
• An Interview with Kerri Pierce
• Making Art in Communist Romania
• On “Oh! Susanna” by Anthony Madrid
• Best soundbar deal: Get $50 off the Amazon Fire TV Soundbar Plus
• An Alternate Recipe for Chestnuts
• Listen: Hemingway's Unrequited High School Crush
• An Intimate History of America
• What cracked the Milky Way's giant cosmic bone? Scientists think they know.
• Degas’s Model Tells All