【Sisters Slave (2019)】

Things aren't looking so hot for approximately 40,Sisters Slave (2019)000 OnePlus customers. And no, not because they'll probably have to wait until June to upgrade to the OnePlus 6.

It turns out that the company's website was hacked, and in the process credit card numbers and other payment information was likely stolen.

SEE ALSO: OnePlus issues statement as some buyers complain of credit card fraud

According to a statement issued by the Chinese smartphone manufacturer, "a malicious script was injected into the payment page code to sniff out credit card info while it was being entered."

What this means in practice is that, from roughly mid November of 2017 to January 11, 2018, any customer who put their credit card into OnePlus.net could have had it lifted by hackers. Some customers are already reporting fraudulent charges.

"The malicious script operated intermittently, capturing and sending data directly from the user's browser," the company said in a statement. "It has since been eliminated. We have quarantined the infected server and reinforced all relevant system structures."

OnePlus emailed the customers it believes might have been affected, and noted that both card expiration dates and security codes could also have been stolen.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

Original image has been replaced. Credit: Mashable

Security researchers at Fidus Information Security looked into the breach, and what they found doesn't look so good for OnePlus. According to a Fidus blogpost, "OnePlus do not appear to be PCI compliant, nor do they mention this anywhere on the website."

Why does this matter? PCI is short for Payment Card Industry Data Security Standard, and, according to the PCI Security Standards Council, the standards are "the operational and technical requirements for organizations accepting or processing payment transactions, and for software developers and manufacturers of applications and devices used in those transactions."

In other words, according to Fidus, OnePlus may not have been taking basic steps to protect its customers data. Like we said, not looking good.

So, what can you do if you got an email from OnePlus notifying you of the breach? Not much, unfortunately. OnePlus says you should check your bank statement for fraudulent charges, and reach out to the company for any "enquiries."

OnePlus will also offer "one year of credit monitoring to affected customers," according to a company spokesperson.

Somehow, for those who already had their credit cards stolen, we don't imagine these measures will provide much solace.

This story has been updated to note that OnePlus is offering limited credit monitoring.

---

Featured Video For You

---

The OnePlus 5T could have been perfect—if it weren't for its cameras

---

Topics Cybersecurity OnePlus

• Life
• Deals
• Games
• Tech
• Social Good
• Science
• Entertainment
• Shopping

• Analyzing Graphics Card Pricing: May 2018
• Best Hisense 75
• Nintendo Switch 2 vs Switch 1: What's new, what's not?
• A List of Oculus Rift & HTC Vive VR Games to Look Out for in 2016
• Best vacuum mop combo deal: Save $140 on the Tineco Floor One S5
• Amazon Echo Buds deal: $15 off at Amazon
• NYT Connections Sports Edition hints and answers for June 5: Tips to solve Connections #255
• Better Buy: Previous
• Stablecoin bill advances in U.S. Senate as Trump critics call to end his crypto dealings
• I tried Samsung's new One UI 8 beta: Here are all the new features

• A Letter from Ernest Hemingway: “Liquor is my best friend”
• 'Only Murders in the Building' Season 3: Every end credits Easter egg
• Piglets & Ghosts: The Unique Thrills of Mexican Paperbacks
• Strand's Last Interview, Joyce's Favorite Escape, and More
• Fitness trackers for dogs are irresistible to data
• Natural Cycles is coming to Apple Watch. So is it safe to use as a contraceptive?
• Tim Kirkland, a Piano Tuner, Finds Religion in His Work
• How Gordon Lish Antipicated “The Jinx”
• Elon Musk might charge everyone a fee to use Twitter/X
• Can a Novel’s Plot Be Reduced to Data Points?

• One of Android's Easter Eggs is a Flappy Bird
• How to unblock RedTube for free in France
• NYT Strands hints, answers for June 6
• Best Lego deal: Lego F1 Collectible Race Cars 6
• Sabalenka vs. Svitolina 2025 livestream: Watch Madrid Open for free
• Finding the Right Components for a Well
• Elon Musk and Donald Trump's feud has exploded
• How to Watch Netflix with Friends Anywhere (and No, It's Not Illegal to Share Your Password)
• Dell S3422DWG Gaming Monitor deal: save $100 at Amazon
• Wordle today: The answer and hints for June 5, 2025

• Music is the secret weapon of Mario Speedrunners
• Best kitchen deal: Save $70 on the Ninja Pizza Oven at Amazon
• Second moon landing attempt ends in disappointment for Japan space firm
• Microsoft/Minecraft: How much did Redmond overpay?
• Anker raises Amazon prices amid US tariffs
• Indeed, job offer scam texts are everywhere. How to spot them and what to do.
• What's new to streaming this week? (June 6, 2025)
• Nintendo Switch 2 vs Switch 1: What's new, what's not?
• The best day to book your flight, according to Google
• I found 100+ Switch 2 listings on eBay, but I don't recommend them