UK Shelly reseller warns customers of potential payment data breach

Shelly Store UK, a UK-based reseller of Shelly smart home equipment, warned customers that their payment data may be compromised. The company stated that after receiving a warning from Stripe, it discovered unauthorized software on its website and server. Shelly Store UK removed the malicious software, strengthened access security, applied updates, introduced monitoring, and reported the incident to the Information Commissioner's Office.

The reseller is contacting all customers who made orders during an unspecified window. While an internal investigation remains ongoing, Shelly Store UK was unable to determine whether customer data was accessed or copied. A customer suspected their full card details were swiped between October 12 and October 27. In addition to payment card details, customers may have had their names, billing addresses, and contact details compromised.

Shelly Store UK recommended that customers contact their card issuer for guidance on whether they will need a replacement card. The company also urged caution in receiving communications asking for data such as payment details and security codes, and recommended a password reset. Shelly Store UK apologized for the concern and inconvenience caused. A Shelly spokesperson stated that Shelly Store is not part of, owned by, or directly affiliated with Shelly Group, and that they do not manage the Shelly Store website, its business operations, or direct customers to it.