X

OnePlus hack exposed credit cards of up to 40,000 people

The phonemaker's website was breached, and credit card numbers, expiration dates and security codes "may have been compromised."

David Katzmaier Editorial Director -- Personal Tech
David reviews TVs and leads the Personal Tech team at CNET, covering mobile, software, computing, streaming and home entertainment. We provide helpful, expert reviews, advice and videos on what gadget or service to buy and how to get the most out of it.
Expertise A 20-year CNET veteran, David has been reviewing TVs since the days of CRT, rear-projection and plasma. Prior to CNET he worked at Sound & Vision magazine and eTown.com. He is known to two people on Twitter as the Cormac McCarthy of consumer electronics. Credentials
  • Although still awaiting his Oscar for Best Picture Reviewer, David does hold certifications from the Imaging Science Foundation and the National Institutes of Standards and Technology on display calibration and evaluation.
David Katzmaier
OnePlus-5t-white-blanco
Juan Garzón / CNET

If you bought a OnePlus phone such as the OnePlus 5T between November and January, you'd best check your credit card statement.

The phone maker on Friday confirmed in a statement that its website, oneplus.net, was hacked, potentially exposing the detailed credit card information of up to 40,000 customers. 

The company sent an email to customers saying that card numbers, expiration dates and security codes "may have been compromised."

A malicious script on the company's pages was inserted, harvesting the information from web browsers. The company says it has been removed, but customers who entered information into the site between mid-November 2017 and Jan. 11, 2018 could be at risk.

The cause of the breach was not immediately known, ZDNet reports. Reached for comment, a OnePlus representative offered no further details beyond the company's statement.

OnePlus 5T looks bright in sandstone white

See all photos