OnePlus said that the hacker's entry point was a loophole in their official website and users might receive spam and phishing emails post the data breach.
source https://www.news18.com/news/tech/oneplus-hit-by-data-breach-notifies-users-that-names-addresses-leaked-2397535.html