OnePlus credit card info breach: Smartphone-maker says nearly 40k customers at risk

Up to 40,000 users of OnePlus smartphones may have been hit by the attack on company website that led to fraudulent transactions on their credit cards. The revelation came a week after many customers reported fraudulent charges on their credit cards that they made purchases via official company site.

As per an update that was posted on the OnePlus forum by a staffer on Friday, the official investigation by the Chinese tech giant has found that the incident took place due to a malicious code that had been injected on the payment page of the site.

Also Read: OnePlus under scanner after customers complain about their credit card details being misused

“One of our systems was attacked, and a malicious script was injected into the payment page code to sniff out credit card info while it was being entered… the malicious script operated intermittently, capturing and sending data directly from the user's browser. It has since been eliminated,” informed the statement on the forum which also assured customers that the company had quarantined the infected server and reinforced all relevant system structures besides informing all customers who were likely affected.