https://www.theguardian.com/business/2016/oct/25/att-secretl...
American system is driven by rule of laws. Legislature and Judiciary are two independent branches. It is not like China where Executive says something and then Judiciary is scared to act against it because, tomorrow, they may end up in a training camp.
I really hate that most companies force me to give a phone number when I buy something. Why do they need it? Why forcing? I usually end up giving a fake one.
1. Use pseudo name (nickname) for shipping, instead of full name
2. Use company address instead of home one whenever possible
Just think about how many people have to access your shipping data just to deliver an order to you, the online shop, the shipping company, the warehouse, the delivery guy.
It kind of hard to imagine all of them would have perfect bank-level security.
Many publicly accessible government records have address information.
My hope is that over the coming decade there is a mental shift, and personal information becomes seen as a risk rather than a resource.
https://blogs.findlaw.com/law_and_life/2019/07/safe-deposits...
- Intruders breached OnePlus systems
- On X date, unauthorized intruders accessed data in our systems
etc.
We are reaching out to you directly as we have discovered that part of your order information was accessed by an unauthorized party. We can confirm that your payment information, password and account are safe, but your name, contact number, email and shipping address may have been exposed.
We took immediate steps to stop the intruder and reinforce security. Right now, we are working with the relevant authorities to further investigate this incident and protect your data.
We wanted to notify you of this so that you can be alert to people pretending to be OnePlus to get further information from you, or people asking you to buy products or services from them. OnePlus will never ask you for your passwords, and any financial information should only be provided via a secure payment page on the OnePlus website or one of our partners if you are buying products from us.
We are deeply sorry about this, and are committed to doing everything in our power to prevent further such incidents. We will continue to investigate and update you as we learn more. In the meantime, please contact us with any questions or concerns at Customer Support.
Those are personally identifiable information that has been breached. So the attackers can identify me with my shipping address, email and my name.
Minus One Hundred Thousand from me.
How did they get in? and why wasn't the security "reinforced" in the first place?
