UK Shelly retailer investigates possible customer data exposure
A UK reseller of Shelly smart home equipment says it found unauthorised software on its website and server after a warning from payment provider Stripe. The incident may have exposed customers’ payment details and personal information, though the company says it cannot yet establish whether data was accessed or copied.
The reseller removed the software, updated security and reported the incident to the Information Commissioner’s Office; its investigation is ongoing. One customer reported a £221.28 transaction in Australia dated 26 October, after ordering from the store on 12 October and before receiving a breach email on 27 October. The company advises affected customers to check transactions, contact their card issuer and reset passwords. Shelly Group says the reseller is independent and it does not manage its website or operations.
In short
- A UK Shelly reseller found unauthorised software on its website and server.
- Customer payment and contact data may have been exposed.
- One customer reported a £221.28 Australian charge.
Explained simply
Shelly is a brand of smart home devices, such as connected switches and sensors. The UK shop in this story is a reseller: it sells Shelly products but operates independently of Shelly Group, the company behind the brand.
Online shops handle personal details and payment information when customers place orders. The Information Commissioner’s Office is the UK regulator responsible for data protection, while Stripe provides payment services to businesses. An unauthorised programme on a shop’s website or server can put customer information at risk, although its presence alone does not show whether anyone accessed or copied that information.
The issue matters because exposed details could lead to misuse of personal or payment information. Customers may need to check their accounts and protect their passwords, while the investigation will help establish what information, if any, was accessed.
Business Companies Cybersecurity Technology UK World
Read the full article at the source →
Originally published by The Register as “UK Shelly reseller warns payment data stolen after malware found on website”.