OnePlus Security Breach Affected 3,000 Indian Users: Report

OnePlus was reported of a security breach recently in which the company has confirmed that the personal data like contact numbers, shipping address, name, email ID of the users have been exposed. However, the company assured that the information about payment and account details are not been breached.

Now, it has been reported by CERT-IN which is an Indian cybersecurity agency that less than 3,000 Indian users were affected by this security breach. Here are the details:

At the time of the announcement, OnePlus did not mention the number of users compromised in this breach. However, the OnePlus users were recommended by CERT-IN to change their account passwords as a gesture of precaution.

The cybersecurity agency report also advises all the users to be alert and not to open any spam and phishing emails. Users are also suggested to avoid clicking the URL link in a spam email, neither open the attachments. Opening attachments and clicking URL from spam email might leads to damage to the user.

"We took immediate steps to stop the intruder and reinforce security. Right now, we are working with the relevant authorities to investigate this incident further and protect your data," reads the OnePlus official forum.

Meanwhile, the cybersecurity agency has rated the severity as a medium. OnePlus has already sent alert emails to all the affected users, and the company confirmed that the users who didn't receive any email from the OnePlus team are safe from the data breach. The company is also investigating the matter with cybersecurity agencies to find out the exact cause.

The company has also confirmed that it is going to launch a bug bounty program which will challenge developers to find a vulnerability in OnePlus smartphones. We can expect that the developers who will successfully find the bug will also be entitled to rewards.

"We are continually upgrading our security program - we are partnering with a world-renowned security platform next month, and will launch an official bug bounty program by the end of December."