OnePlus-Kreditkarten-Leck: 40.000 Nutzerdaten gestohlen

[P-J-F]

Die Überschrift sagt alles. Nach dem zunächst vagen Verdacht, dass es bei OnePlus ein Problem mit den gespeicherten Kundendaten geben könnte, ist das Unternehmen in einer internen Untersuchung zu einem leider niederschmetternden Ergebnis gekommen. Zehntausende Kunden hat es erwischt, die Sperrung der aktuellen Kreditkarte ist wohl leider ratsam.

Kartennummer, Ablaufdatum sowie die Prüfnummer - das gesamte Paket, um mit einer Kreditkarte online zu bezahlen ist in geschätzt 40.000 Fällen aus der Datenbank von OnePlus abgeschrieben worden. Damit bestätigt sich der Verdacht, dass Kreditkarten-Kunden des Onlineshops, der vergangenen zweieinhalb Monate, mit unrechtmäßigen Transaktionen auf ihrem Konto rechnen müssen. Das Unternehmen hat in einem Foreneintrag um Entschuldigung gebeten und bietet im Rahmen seiner Möglichkeiten Support an. Wer möglicherweise betroffen ist, den will OnePlus per Mail direkt informieren. Gefahr besteht aber tatsächlich “nur”, falls ihr mit Kreditkarte bezahlt habt, Transaktionen per PayPal (auch wenn der Zahlungsdienst dann eure Kreditkarte belastet) sind nach Angaben des Herstellers sicher.

​

​

We are deeply sorry to announce that we have indeed been attacked, and up to 40k users at oneplus.net may be affected by the incident. We have sent out an email to all possibly affected users.

1. What happened

One of our systems was attacked, and a malicious script was injected into the payment page code to sniff out credit card info while it was being entered.

• The malicious script operated intermittently, capturing and sending data directly from the user's browser. It has since been eliminated.
• We have quarantined the infected server and reinforced all relevant system structures.

2. Who's affected

• Some users who entered their credit card info on oneplus.net between mid-November 2017 and January 11, 2018, may be affected.
  • Credit card info (card numbers, expiry dates and security codes) entered at oneplus.net during this period may be compromised.
  • Users who paid via a saved credit card should NOT be affected.
  • Users who paid via the "Credit Card via PayPal" method should NOT be affected.
  • Users who paid via PayPal should NOT be affected.
• We have contacted potentially affected users via email.

3. What you can do

• We recommend that you check your card statements and report any charges you don’t recognize to your bank. They will help you initiate a chargeback and prevent any financial loss.
• For enquiries, please get in touch with our support team at Customer Support.
• If you notice any potential system vulnerabilities, please report them to security@oneplus.net. This is a monitored inbox, but please note, we may not be able to respond to all reports.

4. What we are doing

We cannot apologize enough for letting something like this happen. We are eternally grateful to have such a vigilant and informed community, and it pains us to let you down.

We are in contact with potentially affected customers. We are working with our providers and local authorities to better address the incident. We are also working with our current payment providers to implement a more secure credit card payment method, as well as conducting an in-depth security audit. All these measures will help us prevent such incidents from happening in the future.

Diskussion zum Beitrag
(im Forum "OnePlus Allgemein")