The North Face resets passwords after credential-stuffing attack

mood · Nov 13, 2020

The North Face resets passwords after credential-stuffing attack
November 13, 2020
https://www.tripwire.com/state-of-s...s-passwords-after-credential-stuffing-attack/

An undisclosed number of customers of outdoor clothing retailer The North Face have had their passwords reset by the company, following a credential-stuffing attack.

The company has revealed that on October 9, 2020, it became aware that hackers had used usernames and passwords stolen from a third-party website to gain unauthorised access to customer accounts.

In a data breach notification sent to affected customers, The North Face explained that the hackers may have gained access to account information – including products previously purchased on its website, products that have been saved to “favorites”, billing and shipping addresses, names, birthdays, telephone numbers, email preferences, and loyalty point totals.
Click to expand...

Nonetheless, it does sound as if some unauthorised purchases may have been made as a result of the security breach. The North Face told Bleeping Computer that it will offer full refunds for any purchases made by the hackers.

In addition The North Face says it has introduced measures to spot suspicious activity which might signify a credential-stuffing attack in future.
Click to expand...

Log in or Sign up

The North Face resets passwords after credential-stuffing attack

mood Updates Team