Smartphone maker OnePlus discloses data breach (again)

guest · Nov 22, 2019

OnePlus security breach exposes order info — payments and passwords reportedly safe
November 22, 2019
https://www.androidpolice.com/2019/...-info-payments-and-passwords-reportedly-safe/

OnePlus's security team has just announced that some of its customer information had been accessed by an unauthorized party. Name, phone, email, and shipping address data for some customers was exposed, and impacted users have been informed by the company of the security breach via email.

OnePlus confirms that payment information and passwords were not included in the breach, and not all customers were affected.
Following the breach, OnePlus has hardened its internal security practices to ensure there aren't any other "similar vulnerabilities."
Click to expand...

guest · Jul 3, 2020

OnePlus fixes yet another security flaw that may have exposed sensitive customer data
Fortunately, there's no evidence it was ever actively exploited
July 3, 2020
https://www.androidpolice.com/2020/...hat-may-have-exposed-sensitive-customer-data/

A security vulnerability in OnePlus' out-of-warranty repair invoicing system has been fixed. The vulnerability, which was discovered on June 30th, exposed customer details including full names, phone numbers, email addresses, IMEI numbers, and physical addresses.

The system affected is run by a third-party vendor and is only used by US customers. Android Police disclosed details of the vulnerability to OnePlus after receiving a tip from a reader, and OnePlus does not believe it was ever actively exploited.
Again, as far as we know, only US customers would ever have been at risk.
Click to expand...

According to an internal audit conducted by OnePlus, there is no evidence the vulnerability was ever exploited. For the time being, identifying details have been stripped from the invoicing system, and starting July 6th, a new verification system will be in place.
Android Police was informed of the vulnerability by a tipster (Thanks: Eric Lang) on June 30th, but it's unclear how long the vulnerability existed.

Android Police worked with OnePlus to resolve the issue, and the company provided us with the following statement on July 3rd regarding the vulnerability: [...]
Click to expand...

guest · Jul 24, 2020

OnePlus accidentally exposes customer information — again —
What's BCC?
July 23, 2020
https://www.androidpolice.com/2020/...ormation-again-in-the-stupidest-way-possible/

OnePlus has now suffered two security snafus in just a month.
Today's news is a bit less serious, but given the company's history, it's indicative of a clear trend. OnePlus blasted out a mass mailer for a research study earlier today, and someone seems to forgotten what BCC means, giving everyone in the chain access to "hundreds" of customer emails. Whoops.

We can't actually verify the number of folks that were included in the (fairly minor) leak since the emails were only handed to other folks on the thread, but one person that was included in the mass mailer says "hundreds" of email addresses were present.
Click to expand...

Usually, it's just a bit funny, but when folks on the list are customers of a company, and that information could be tied to details that might be available as a result of previous leaks, it's a little more concerning.
We're told that the email was likely sent to people that signed up for a UX survey offered by OnePlus after the 10.5.11 update.
Click to expand...

Log in or Sign up

Smartphone maker OnePlus discloses data breach (again)

guest Guest

guest Guest

guest Guest

Log in or Sign up

Smartphone maker OnePlus discloses data breach (again)

guest Guest

guest Guest

guest Guest

Useful Searches