The information accessed in the breach includes names, contact numbers, email and shipping address but the company said payment information, passwords and accounts were not affected.
While OnePlus says that customers' payment information and passwords are safe, the data that has been accessed is still enough to be worrisome.
The customers' order information included access to customers' names, contact numbers, emails, and shipping addresses. The company has also said that the impacted users have also been informed by email about the incident. However, due to the fact that your email address was exposed, you may receive phishing emails and/or spam.
It does not appear at this time that any other information was exposed during this security breach. However, if you have further concerns, please contact us at oneplus.com/support for assistance.
If you have not received an mail from OnePlus, then your data is not breached. However, OnePlus has warned that impacted users may receive spam, phishing emails.
However, OnePlus said that it immediately took steps to stop the breach and informed impacted users over email. It has been nearly of week since this data breach but the information has been made public just recently. It's also working together with undefined authorities regarding the incident, and plans to launch an official bug bounty program (previously revealed back in September) by the end of December.
"We've inspected our website thoroughly to ensure that there are no similar security flaws", the company said.
In January 2018, OnePlus experienced another data breach after attackers injected a malicious script on the company's online store that allowed them to harvest and steal the card details of roughly 40,000 customers.
OnePlus also assured that necessary steps were taken to reinforce security in its systems and it is now investigating the incident with the help of relevant authorities.
The company is sorry about the incident and is now working with the relevant authorities to learn about the root causes of this unfortunate incident.