OnePlus Suffers Another Security Breach Leaking Customer Names, Emails, Addresses

oneplus 7t front and back
Nearly two years ago, OnePlus announced that it had experienced a security breach that resulted in the credit card details of roughly 40,000 customers being stolen. "We are also working with our current payment providers to implement a more secure credit card payment method, as well as conducting an in-depth security audit," wrote the company at the time. "All these measures will help us prevent such incidents from happening in the future."

Now, OnePlus is reporting that it has experienced yet another security incident, and this time the company says that personal information from some of its users was accessed by an "unauthorized party". OnePlus is not naming this third-party company/vendor, but it says that the following information was accessible:

  • Name
  • Contact number
  • Email address
  • Shipping address
  • Certain order details

OnePlus says that it has already reached out to its customers that have been affected by this security incident, but it isn't disclosing the total number involved. The company writes:

We understand that personal information is very important to our users, and all impacted users were notified via email. If you don’t get an email from us today, rest assured that your order information is safe. However, if you have further concerns, please contact us at oneplus.com/support for assistance.

OnePlus is also warning affected users to be more vigilant in the coming days and weeks if their personal data was indeed compromised. According to OnePlus Security Team member Ziv, "Impacted users may receive spam and phishing emails as a result of this incident."

In a repeat from last year's mishap, Ziv continued, adding, "We are deeply sorry about this, and are committed to doing everything in our power to prevent further such incidents."

OnePlus 7 Pro display

Not surprisingly, OnePlus users weren't too forgiving in the accompanying forum thread announcing the discovery, with Ch4rlux writing, "Seems you didn't get the lesson from last time." Ariblaze added, "The sad part is this is not the first time that this is happening," while knollorulez chimed in, defiantly writing, "You've messed it up. Again. Why don't you just sell my data? FU one plus."

Needless to say, OnePlus has a lot of work cut out for it when it comes to locking down its customer data. Sound off in the comments for your thoughts on the topic. Did any of you receive an email from OnePlus?