OnePlus Gives Update on Payments Breach, Says 40,000 Accounts Were Affected
About a week ago, we started seeing reports from OnePlus Store customers of fraudulent charges on their monthly credit card and bank account statements. As it turns out, there was an attack on the OnePlus website involving a malicious script injected into the payments page code. After acknowledging the issue and temporarily shutting down credit card payments on its website , the company issued an update on its investigation in a blog post. What happened? Signs of an attack on OnePlus’s payments page were reported on Reddit and the OnePlus forums , but it was researchers at Fidus who first concluded that either (1) OnePlus’s credit card payment gateway CyberSource was hacked, or that (2) the web store was compromised. Initially, OnePlus claimed that credit card processing didn’t occur on its website and that it hadn’t stored credit card information on its servers. However, the payment ...