2026 Shelly Store UK — malware on the store's website may have exposed payment card and billing details; count not disclosed
Data compromised
Payment card details, names, billing addresses and contact details of customers who bought through the website. The company says data "may have been" compromised. No count has been published.
Technical writeup
Source is The Register (October 30), quoting the customer email. The date is the first public report; the incident date is not stated. No public company notice was found.
Root cause
The UK online reseller of Shelly devices says it found unauthorised software on its website and server after a warning from Stripe. It has emailed customers. Shelly Group has said the store is not part of the group. The start date and method have not been published.