Chinese smartphone maker OnePlus has suffered a new data breach exposing personal and order information of an undisclosed number of its customers. The breach came to light after OnePlus started informing affected customers via email and published a brief FAQ page to disclose information about the security incident. The company did not provide any detail of the vulnerability that attackers exploited to compromise its online store website. As a result of this breach, the company has also decided to launch an official bug bounty program by the end of December 2019, allowing researchers and hackers to get paid for responsibly reporting severe vulnerabilities.
Source: https://thehackernews.com/2019/11/oneplus-store-data-breach.html