X

OnePlus hack exposed credit cards of up to 40,000 people

The phonemaker's website was breached, and credit card numbers, expiration dates and security codes "may have been compromised."

Headshot of David Katzmaier
Headshot of David Katzmaier
David Katzmaier Editor in Chief
David leads the editorial team at CNET. We create expert reviews, articles and video on every aspect of technology, from AI to Zoox. We are thoroughly, proudly human.
Expertise A 25-year CNET veteran, David has been reviewing TVs since the days of CRT, rear-projection and plasma. He created CNET's methodology for testing TVs, streaming services and AI tools. Prior to CNET he wrote for Sound & Vision magazine and eTown.com. Credentials
  • Although still awaiting his Oscar for Best Picture Reviewer, David does hold certifications from the Imaging Science Foundation and the National Institutes of Standards and Technology on display calibration and evaluation.
David Katzmaier
OnePlus-5t-white-blanco
Juan Garzón / CNET

If you bought a OnePlus phone such as the OnePlus 5T between November and January, you'd best check your credit card statement.

The phone maker on Friday confirmed in a statement that its website, oneplus.net, was hacked, potentially exposing the detailed credit card information of up to 40,000 customers. 

The company sent an email to customers saying that card numbers, expiration dates and security codes "may have been compromised."

A malicious script on the company's pages was inserted, harvesting the information from web browsers. The company says it has been removed, but customers who entered information into the site between mid-November 2017 and Jan. 11, 2018 could be at risk.

The cause of the breach was not immediately known, ZDNet reports. Reached for comment, a OnePlus representative offered no further details beyond the company's statement.

OnePlus 5T looks bright in sandstone white

+9 More
See all photos

Mobile Guides

Phones
Foldable Phones
Headphones
Mobile Accessories
Smartwatches
Wireless Plans