OnePlus's security team has just announced that some of its customer information had been accessed by an unauthorized party. Name, phone, email, and shipping address data for some customers was exposed, and impacted users have been informed by the company of the security breach via email.
OnePlus confirms that payment information and passwords were not included in the breach, and not all customers were affected.
Following the breach, OnePlus has hardened its internal security practices to ensure there aren't any other "similar vulnerabilities." It's also working together with undefined authorities regarding the incident, and plans to launch an official bug bounty program (previously revealed back in September) by the end of December.