一家总部位于英国的Shelly智能家居设备经销商警告客户，其支付数据可能已遭泄露，原因是其网站上发现了“未经授权的软件”。《The》看到的一封来自Shelly Store UK的电子邮件称：“在收到我们的支付服务提供商Stripe的警告后，我们进行了调查，并在我们的网站和服务器上发现了未经授权的软件。”“我们删除了已识别的恶意软件，加强了访问安全，应用了安全更新，并引入了持续监控。我们还将该事件报告给了信息专员办公室。”
A UK-based reseller of Shelly smart home equipment has warned customers that their payment data may be compromised after “unauthorized software” was found on its website. “After receiving a warning from our payment provider, Stripe, we investigated and found unauthorized software on our website and server,” the email from Shelly Store UK, seen by The, stated. “We removed the identified malicious software, strengthened access security, applied security updates and introduced ongoing monitoring. We have also reported the incident to the Information Commissioner’s Office.”
Shelly Store UK告知客户，他们无法确定客户的数据是否被访问或复制，不过所有在未指明时间段内下过订单的客户都正在被联系。一位用户告诉我们，在收到Shelly Store UK的电子邮件前数小时，他们因一笔日期为10月26日、金额为221.28英镑、使用其信息在澳大利亚完成的交易，开始向发卡机构提出支付争议。
Shelly Store UK informed customers it was unable to determine whether their data was accessed or copied, although all customers who made orders during an unspecified window are being contacted. One punter told us that hours before they received the email from Shelly Store UK, they began a payment dispute with their card provider after a £221.28 transaction, dated October 26, was made in Australia using their details.
他们怀疑自己的完整卡信息在10月12日至10月27日之间的某个时间点被盗刷；10月12日是他们首次也是唯一一次在该公司下单的日期，10月27日则是他们收到泄露通知的日期。Shelly Store UK没有立即回应我们要求提供更多细节的请求。其通知邮件称，内部调查仍在进行中，除支付卡信息外，客户的姓名、账单地址和联系方式也可能已遭泄露。
They suspect their full card details were swiped at some point between October 12, when they made their first and only order with the company, and October 27, when they received the breach notification. Shelly Store UK did not immediately respond to our request for more details. Its notification email stated the internal investigation remains ongoing, and in addition to payment card details, customers may have had their names, billing addresses, and contact details compromised.
Shelly Store UK建议客户联系发卡机构，咨询是否需要更换卡片，并仔细检查交易记录，举报任何可疑条目。该公司还敦促客户在收到要求提供支付信息和安全码等数据的通信时保持警惕，并建议重置密码。该公司表示：“对于这可能引起的担忧和不便，我们深表歉意。”
Shelly Store UK recommended that customers contact their card issuer for guidance on whether they will need a replacement card, and to scour their transaction histories and report any suspicious entries. It also urged caution in receiving communications asking for data such as payment details and security codes, and recommended a password reset. “We’re sorry for the concern and inconvenience this may cause,” the company said.
“我们对此事高度重视，如果我们的调查发现任何与您相关的进一步信息，我们将与您联系。”Shelly Store UK是Shelly智能家居产品的授权经销商，完全独立于Shelly主体公司。Shelly的一位发言人表示：“Shelly Store是Shelly的经销商，不属于Shelly集团，也不由Shelly集团拥有或与其直接关联。我们不管理Shelly Store网站及其业务运营，我们也没有在任何网站上引导客户前往Shelly Store UK。”®
“We are taking this seriously and will contact you if our investigation identifies further information relevant to you.”Shelly Store UK is an authorized reseller of Shelly smart home products and is wholly independent of the main Shelly company. “Shelly Store is a reseller of Shelly and is not part of, owned by, or directly affiliated with Shelly Group,” a Shelly spokesperson said. “We do not manage the Shelly Store website, its business operations, and we do not direct our customers from any of our websites to Shelly Store UK.” ®