![\"\"](\"https:\/\/icrowdnewswire.com\/wp-content\/uploads\/2020\/07\/4126-logo-1-1584.png\"){kind=logo}
<\/p>\n<\/p>\n
![\"OnePlus](\"https:\/\/m-cdn.phonearena.com\/images\/article\/126171-two_350\/OnePlus-mistakenly-leaks-user-email-addresses-merely-some-weeks-after-fixing-a-security-loophole.webp\")
<\/p>\n
OnePlus<\/a> is at it again. No, we are not talking about a new device, but a security breach reported by Android Police<\/a>. And while this one is minor when compared to previous incidents, it was easily preventable.<\/p>\n Tags:<\/b> Anam Hamid<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"\nKids, never undermine the importance of the Bcc field<\/h2>\n<\/div>\n
First, an email 101. When you are composing an email, there is a field called Blind carbon copy or Bcc that doesn’t let recipients see each other’s email addresses. It’s often used by marketers and companies when they send the same message to various people. <\/div>\nThis week, OnePlus sent out a mass email about a research study and it forgot to use the Bcc field. As a result, email addresses of nearly 271 people were exposed, according to an estimate. The email was apparently sent to customers who signed up for a user interface survey after the OxygenOS 10.5.11 update.<\/div>\n\n\n\nOnePlus is no stranger to data breaches<\/h2>\n<\/div>\n
On the surface, this seems like a slip-up without any serious consequences. However, it’s not a good look for the Chinese company, who fixed a security vulnerability<\/a> that exposed information of US customers such as names, phone numbers, email addresses, and physical addresses some weeks back. The loophole was in the manufacturer’s out-of-warranty repair and advance exchange invoicing system and there is no evidence that it was exploited. <\/div>\nIn 2019, another data breach<\/a> enabled unauthorized access to some order data such as customer names, emails, contact numbers, and shipping addresses. It led the company to launch the OnePlus Security Response Center (OneSRC)<\/a>, a bug bounty program for improving the security ecosystem.<\/div>\n <\/div>\nPrior to that, in 2018, credit card information of up to 40,000 customers<\/a> was stolen. Before that, in 2017, a backdoor vulnerability<\/a> was discovered in various OnePlus handsets.<\/div>\n <\/div>\nOnePlus has so far not said anything about the recent incident.<\/div>\n<\/div>\n<\/div>\nSee Campaign: <\/strong>https:\/\/www.phonearena.com\/news\/OnePlus-user-email-addresses-leak_id126171<\/a>
Contact Information:<\/b>
Anam Hamid<\/p>\n
<\/a>, Wire<\/a>, United States<\/a>, English<\/a><\/p>\n<\/div>\n
\nContact Information:<\/h3>\n
OnePlus is at it again. No, we are not talking about a new device, but a security breach reported by Android Police. And while this one is minor when compared to previous incidents, it was easily preventable. Kids, never undermine the importance of the Bcc field First, an email 101. When you are composing an email, there … Continue reading OnePlus mistakenly leaks user email addresses, merely some weeks after fixing a security loophole<\/span><\/a> Continue Reading