💳Shelly Reseller Warns Customers Their Card Data May Be Stolen
Check your card statements from October 12 to 27
TL;DR
A UK reseller of Shelly smart home gear found unauthorized software on its site and server. Customers' card numbers, names, and billing addresses may have been exposed. If you ordered from them recently, check your statements and reset your password now.
A UK reseller of Shelly smart home equipment just told customers their payment data may be compromised. The company found unauthorized software on its website and server, removed it, and reported the incident to the Information Commissioner's Office. The catch: it's still not clear how many customers were hit, because the affected order window hasn't been disclosed. If you bought smart home gear from a third-party seller, this is the reminder you needed. Resellers run their own sites and their own checkout flows, and Shelly Group says it doesn't manage this one or send customers there. Check your card statements now, not next month. One customer already reports a £221.28 charge in Australia, which suggests full card details were skimmed. The exposed data includes payment card details, names, billing addresses, and contact details. The suspected window is October 12 to October 27. The company recommends contacting your card issuer to see whether you need a replacement card, resetting your password, and treating any email asking for payment details or security codes as phishing. Watch for follow-up from the ICO and whether the reseller confirms the exact order window. Until then, assume the worst.

Key Points
The reseller found unauthorized software on its website and server, then removed it, strengthened access security, and applied security updates.
Keep reading — it's free
Enter your email to keep reading — plus the best of AI & tech, daily. Free, forever.
Already a member? Sign in
Comments
Be the first to comment