UK Shelly retailer investigates possible customer data exposure
A UK reseller of Shelly smart home equipment says it found unauthorised software on its website and server after a warning from payment provider Stripe. The incident may have exposed customers’ payment details and personal information, though the company says it cannot yet establish whether data was accessed or copied.
The reseller removed the software, updated security and reported the incident to the Information Commissioner’s Office; its investigation is ongoing. One customer reported a £221.28 transaction in Australia dated 26 October, after ordering from the store on 12 October and before receiving a breach email on 27 October. The company advises affected customers to check transactions, contact their card issuer and reset passwords. Shelly Group says the reseller is independent and it does not manage its website or operations.
In short
- A UK Shelly reseller found unauthorised software on its website and server.
- Customer payment and contact data may have been exposed.
- One customer reported a £221.28 Australian charge.
Business Companies Cybersecurity Technology UK World
Read the full article at the source →
Originally published by The Register as “UK Shelly reseller warns payment data stolen after malware found on website”.