OnePlus today confirmed thieves siphoned tens of thousands of people’s credit card numbers from its online store.

The Chinese phone company admitted after a week of probing that about 40,000 of its customers had their payment card details nicked while buying stuff from its web shop.

Crooks were quick to start plundering victims’ accounts using the swiped information, going on shopping sprees with the stolen card data.

Here’s how it went down: one of the store’s servers was hacked, and its code modified so that between mid-November, 2017, and January 11 this year, bank card details typed into oneplus.net by shoppers were copied and sent over to miscreants.

Read full news article on The Register