OnePlus has shared some exciting news lately, like the Android Oreo update for the OnePlus 5 and the launch of the OnePlus 5T Sandstone white, but this week there's some less-than-exciting news coming from the company.
OnePlus says that customers that recently made purchases from OnePlus.net noticed fraudulent transactions on their credit cards this past weekend. These customers made credit card payments directly on OnePlus.net and did not use PayPal.
The company is still looking into the situation, but while it does, it has temporarily disabled credit card payments on OnePlus.net. That means that if you want to buy something from OnePlus, you'll need to use PayPal.
In its announcement, OnePlus explains that customers' credit card info isn't stored on its website, but is instead sent to a PCI-DSS-compliant payment processing partner over an encrypted connection. This issue isn't a result of OnePlus's "Save this card for future transactions" feature either, and the company says that its site should not be affected by the Magento bug that affected some sites because since 2014, OnePlus has been rebuilding its site with custom code rather than using the Magento eCommerce platform.
It's still unclear exactly how the credit card info of some OnePlus customers ended up in nefarious hands. If you've recently made a purchase on OnePlus's site and paid with a credit card, you should monitor your statements and report and suspicious activity.