PayPal hacker attack exposes customer names and social security numbers in credential stuffing attack (ie script-kiddy brute force hack right out of the 1990's)

submitted by SoCo from foxnews.com

sorted by:
top
newinsightfulfun
you are viewing a single comment's thread.

view the rest of the comments →

[–]dicknipples 4 insightful - 1 fun4 insightful - 0 fun5 insightful - 1 fun -  (2 children)

Link to a trustworthy source, ffs:

https://www.forbes.com/sites/daveywinder/2023/01/21/no-paypal-hasnt-been-hacked-yet-almost-35000-accounts-were-breached/?sh=6b3d53fa3ea7

The answer is an emphatic no; hackers did not breach PayPal. The irony here is that it will have been breaches at other services that were behind the large-scale credential stuffing attack, which led to nearly 35,000 PayPal customer accounts being accessed by an unauthorized third-party criminal actor.

Jake Moore, the global cyber security advisor at ESET, has further advice for concerned PayPal customers among the 34,942 account holders impacted here. "The owners of the affected accounts should by now have been notified, and it would be advisable for those people to remain on high alert due to the amount of personal data that may have been accessed in this unfortunately simple breach. Credential stuffing is an automated process where a threat actor uses reused log-on credentials stolen from subsequent password breaches on another account.

[–]dissidentrhetoric 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (1 child)

forbes trustworthy? haha