I get that data breaches are their own class of problem, but I do find it ironic that people gave their contact/sales info to a company headquartered in Shenzen and have any expectation of data protection/privacy.
OnePlus Hit by Data Breach
11–20 of 53 posts
Re: OnePlus Hit by Data Breach
#12Ok, the breach shouldn't have been possible. But at least, when a breach does happen, this is a good example of how a company should communicate. First assessing who/what has been impacted, informing affected customers and a clear (could use some more detail) public statement. Of course, some laws like GDPR force them to do this, but in reality we still see enough big corporations handle this way worse on an almost d…
Got an email this morning
Re: OnePlus Hit by Data Breach
#13Re: OnePlus Hit by Data Breach
#14"The name, contact number, email and shipping address within certain orders may have been exposed."
I really hate that most companies force me to give a phone number when I buy something. Why do they need it? Why forcing? I usually end up giving a fake one.
Re: OnePlus Hit by Data Breach
#15"The name, contact number, email and shipping address within certain orders may have been exposed." I really hate that most companies force me to give a phone number when I buy something. Why do they need it? Why forcing? I usually end up giving a fake one.
I believe small vendors need it to verify that you really are the owner of the CC (it's a requirement of the processor).
Re: OnePlus Hit by Data Breach
#16Well darn, I just bought a OnePlus 7 Pro, checked my email, it's shipped! And I'm part of the data breach. :(
Re: OnePlus Hit by Data Breach
#17Garbage phone, garbage company. What do you expect?
Re: OnePlus Hit by Data Breach
#18Ok, the breach shouldn't have been possible. But at least, when a breach does happen, this is a good example of how a company should communicate. First assessing who/what has been impacted, informing affected customers and a clear (could use some more detail) public statement. Of course, some laws like GDPR force them to do this, but in reality we still see enough big corporations handle this way worse on an almost d…
As an example of an initial notification, maybe. However, that has to be followed up with a full post mortem. I see zero information about what happened or what steps are being taken.
They're still figuring that all out. The second post in the thread is about all they know probably. I only got my email about the breach an hour before the post was made.
Re: OnePlus Hit by Data Breach
#19Well darn, I just bought a OnePlus 7 Pro, checked my email, it's shipped! And I'm part of the data breach. :(
Content of email:
Security Notification
We are reaching out to you directly as we have discovered that part of your order information was accessed by an unauthorized party. We can confirm that your payment information, password and account are safe, but your name, contact number, email and shipping address may have been exposed.
We took immediate steps to stop the intruder and reinforce security. Right now, we are working with the relevant authorities to further investigate this incident and protect your data.
We wanted to notify you of this so that you can be alert to people pretending to be OnePlus to get further information from you, or people asking you to buy products or services from them. OnePlus will never ask you for your passwords, and any financial information should only be provided via a secure payment page on the OnePlus website or one of our partners if you are buying products from us.
We are deeply sorry about this, and are committed to doing everything in our power to prevent further such incidents. We will continue to investigate and update you as we learn more. In the meantime, please contact us with any questions or concerns at Customer Support.
Re: OnePlus Hit by Data Breach
#20I get that data breaches are their own class of problem, but I do find it ironic that people gave their contact/sales info to a company headquartered in Shenzen and have any expectation of data protection/privacy.
Because American companies definitely don’t sell your data.