News & Resources

OnePlus data breach puts customers’ personal information at risk

  • Posted on

In November 2019, the technology company OnePlus confirmed to its customers that it had experienced a data breach, putting their personal information at risk.

OnePlus revealed that customer order information had been accessed by an unauthorised third-party, meaning data such as names, contact numbers, email addresses and shipping addresses may have been exposed.

Though OnePlus was unable to clarify when exactly the breach took place or the full scale of the situation, some customers received notice despite not purchasing a device since 2018. OnePlus has said that all impacted customers have been notified by email.

The company has claimed that no direct payment information, such as card details, or account information has been breached.

In response to the breach, a OnePlus spokesperson said in a forum post that the company took “immediate steps to stop the intruder and reinforce security” and that the company is “working with the relevant authorities to further investigate this incident and protect your data.”

They continued:

We’ve inspected our website thoroughly to ensure that there are no similar security flaws. We are continually upgrading our security program – we are partnering with a world-renowned security platform next month, and will launch an official bug bounty program by the end of December.

Unfortunately, this is not the first time OnePlus has suffered a data breach, leading many to question how they have handled the current situation. In January 2018, 40,000 online customers had their card details stolen due to a malicious script in the ordering process.

Following this incident, hundreds of customers reported fraudulent activity on their accounts after paying through the OnePlus website. At the time, OnePlus stated that they were “conducting an in-depth security audit.” and that their improved measures would “prevent such incidents from happening in the future.”

Our expertise with data breaches

Hayes Connor is home to one of the largest team of data breach claims specialists in the country. With a wealth of experience and an excellent track record of success, we can guide clients through dealing with any situation where personal data has been lost, stolen or otherwise exposed.

If your data has been exposed or potentially exposed in a data breach, you can take a look at our guide to what to do if your data has been stolen in a data breach.

You can find out more about our expertise and how we handle data breach claims here.

To see how we can help with a data breach, you can use our online claim form or speak to a member of our team by calling 0151 363 5895.

Contact us