UK Shelly reseller warns payment data stolen after malware found on website
Customer says they received fraudulent charges on their card hours before company notified them
A UK-based reseller of Shelly smart home equipment, Shelly Store UK, has warned its customers that their payment data could be compromised following the discovery of unauthorized software on its website. The reseller, which is wholly independent of the main Shelly company, discovered the malicious software after receiving a warning from its payment provider, Stripe.
Shelly Store UK has taken immediate action to strengthen its security, apply updates, and monitor the situation closely. They have reported the incident to the Information Commissioner's Office. The company has not confirmed if customer data has been accessed or copied, but all customers who placed orders within a specific time frame have been notified.
One customer reported a suspicious £221.28 transaction in Australia, which they suspect was made using their card details between October 12 and October 27, the dates of their order and receipt of the breach notification. Shelly Store UK has advised customers to contact their card issuer, review their transaction history, and reset their passwords.
They have also warned customers to be cautious of unsolicited communications requesting sensitive information. The company is sorry for any concern and inconvenience caused and will continue to investigate the matter.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
