State Farm
August 7, 2019
•[ hack, brute-force, finance ]
US banking and insurance giant State Farm says it suffered a credential stuffing attack in July, during which "a bad actor" was able to confirm valid usernames and passwords for State Farm online accounts.
Edgepark Medical Supplies
July 18, 2019
•[ hack, brute-force, manufacturing ]
Edgepark Medical Supplies notifies 6,572 patients after a "password spray attack" occurred in May 2019.
DNForum
July 26, 2019
•[ hack, brute-force, technology ]
DNForum.com sends out password reset requests to its users after attempts to access the accounts.
King's College London
April 9, 2019
•[ hack, brute-force, education ]
King's College London warns staff and students that some accounts have been "compromised" due to an apparent brute-force attack on password systems.
Citrix
March 6, 2019
•[ hack, brute-force, technology ]
FBI informs Citrix of a data breach that appears to have begun with a 'password spraying' attack aimed to steal weak credentials to access the company's network.
OkCupid
February 12, 2019
•[ hack, brute-force, technology ]
Users of the OkCupid dating app are the victims of a credential stuffing attack.
Dunkin' Donuts
February 12, 2019
•[ hack, brute-force, retail ]
Dunkin' Donuts announces that it was the victim of a credential stuffing attack during which hackers gained access to customer accounts.
Basecamp
January 29, 2019
•[ hack, brute-force, technology ]
Basecamp suffers an hour-long credential stuffing attack targeting its platform.
DailyMotion
January 25, 2019
•[ hack, brute-force, technology ]
Video sharing platform DailyMotion announces that it was the victim of a credential stuffing attack.
Warby Parker
December 20, 2018
•[ hack, brute-force, retail ]
Warby Parker discloses that roughly 198,000 of its customers may have been affected by a credential stuffing attack targeting the eyeglass retail chain. The unauthorized activity started on Sept. 25 and continued through late November.
Dunkin' Donuts
November 29, 2018
•[ hack, brute-force, retail ]
Dunkin' Donuts informs some of its DD Perks program members that their account information may have been exposed through a credential stuffing attack. The incident was discovered on October 31, 2018.
DoorDash
September 25, 2018
•[ hack, brute-force, technology ]
Food delivery startup DoorDash receives dozens of complaints from customers who say their accounts have been hacked. The users are the target of a credential stuffing attack.
AdGuard
September 21, 2018
•[ hack, brute-force, technology ]
AdGuard, a popular ad blocker for Android, iOS, Windows, and Mac, resets all user passwords, after suffering a brute-force attack during which an unknown attacker tried to log into user accounts by guessing their passwords.
Humana
June 21, 2018
•[ hack, brute-force, healthcare ]
Health insurer Humana notifies an unspecified number of health plan members after detecting and blocking a credential stuffing attack against Humana.com and Go365.com. The attacks took place on June 3 and June 4 from overseas IP addresses.
UK National Lottery
March 16, 2018
•[ hack, brute-force, government ]
The UK National Lottery advises all 10.5 million people with online accounts to change their passwords following an attempt by hackers to access accounts using credential stuffing.
Pinterest
December 11, 2017
•[ hack, brute-force, technology ]
Pinterest notifies users of suspicious activity due to attackers trying to compromise accounts using 'credential stuffing' (credentials obtained from other breaches).
Scottish Parliament
August 15, 2017
•[ hack, brute-force, government ]
Officials reveal that the Scottish Parliament has been targeted by a "brute force" cyber attack. The attack, from "external sources", was similar to that which affected Westminster in June.
Zazzle
August 28, 2017
•[ hack, brute-force, retail ]
Zazzle sends an email to customers revealing that hackers in June used brute-force techniques to cycle through account usernames and passwords that were stolen from a breach of another unnamed site.
UK Parliament
June 23, 2017
•[ hack, brute-force, government ]
Up to 90 email accounts are compromised amid a brute-force cyber-attack on UK Parliament.
