1. What happened:





One of our payment systems has been attacked. A malicious script was entered on the credit card payments page to capture the information you entered.


  • The malicious script was intermittent. Not to raise so much suspicion, the malicious code did not operate continuously. Capture and send data through the user's browser . However it has already been eliminated.

  • We put the affected server under quarantine and enforce all relevant structures.




  1. Who is at risk?





  • Some users who entered credit card information on the oneplus.net platform  between mid-November 2017 and January 11, 2018.

    • Credit card information [numbers, expiration date, security codes] all such data entered during this time period are at risk, susceptible to fraud.

    • Users who will have used a credit card already saved will not have been affected.

    • Users who will opt for "Credit Card via PayPal" should not have been affected.

    • Users who paid via PayPal should not have been affected.



  • We have contacted all users at risk via email.



The brand seems to be perfectly aware of the impact this can have on the public and its consumers. It should also be noted that the whole situation was exposed, firstly, by some users in the official forum of the brand. These alerted the others and the manufacturer itself.

In short, if you have a OnePlus if you bought it through the official store in the last 2 months via credit card. Cancel it!